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ABSTRACT 


This report describes and Illustrates a methodology for assessing 
the risk of back-contamination from Mars Surface Sample Return (MSSR) 
missions. The methodology Is designed to provide an assessment of the 
probability that a given mission design and strategy will result In ac- 
cidental release of Martian organisms acquired as a result of MSSR. This 
Is accomplished through the construction of risk models describing the 
mission risk elements and their Impact on back-contamination probability. 
A conceptual framework Is presented for using the risk model to evaluate 
mission design decisions that require a trade-off between science and 
planetary protection considerations. 
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One source of critical concern in the exploration of space is the 
potential for planetary contamination. On the one hand, there is the 
risk of contaminating other planets through inadvertently transporting 
chemical and biological pollutants from Earth. Contamination of another 
planet could greatly impede subsequent research and could result in an 
irrevocable loss of scientific knowledge. Now that the technology exists 
for returning soil samples from another planet using unmanned spacecraft, 
a new, potentially dangerous prospect exists; the remote chance of inad- 
vertently "back-contaminating" the Earth with extraterrestrial organisms. 

Although there is currently no U.S. or international planetary pro- 
tection policy for the return of extraterrestrial samples, an accepted 
policy concerning the contamination of other planets does exist. In 1966 
the Committee of Space Research (COSPAR) of the International Council of 
Scientific Unions achieved an international agreement on quantitative ob- 
jectives for probabilities of events that may contribute to planetary 
contamination. An upper limit on the probability of contamination of 
other planets was recommended. Planetary protection restraints for each 
NASA mission are established in such a way as to ensure conformance with 
the COSPAR standard. 

Establishing a planetary protection nolicy for the return of samples 
from other planets will require deciding what is an acceptable level of 
back-contamination risk. The acceptable risk level is obviously extremely 
small, but it makes little sense to demand that only a zero level of risk 
be tolerated. Even meteors that enter the Earth's atmosphere carry with 
them some chance of contamination from extraterrestrial life forms. Send- 
ing astronauts to the moon and bringing back lunar samples presented some 
small risk of back-contamination. 

The appropriate level of risk for a sample return mission can be 
established only through a recognition of the trade-offs between the po- 
tential costs of contamination and the value of the scientific achieve- 
ment and information to be gained from space exploration. The costs of 
decontamination, sterilizatio and other planetary protection measures 
may be significant, not only in terms of dollars but also in terms of de- 
lays, reduced system reliability, and limitations on mission capabilities. 
A framework must accordingly be developed to assist mission planners in 
evaluating sample return mission strategies. In particular, methodologies 
are needed for the accurate assessment of the probabilities and consequen- 
ces of planetary contamination and of the value derived by society from 
the return to Earth of extraterrestrial soil samples. 
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Our central focus is on the decision framework needed by individuals 
and agencies responsible for decisions relating to the risk of back- 
contamination from Mars Surface Sample Return (MSSR) missions. 


The framework we propose is a logical decision structure for inte- 
grating the factors that affect the decision: available alternatives 

available information, and the preferences of society. The appropriate 
method for representing incomplete information is the language of prob- 
ability theory. Preferences may be represented as trade-offs among 
science, economic costs, and the probabilities of contamination. The de- 
cision structure may then be used to determine the policies, strategies 
and decisions that are consistent with the available alternatives infor- 
mation, and preferences. ^ 

Development of some of the components of this framework is relatively 
straightforward. In particular, assessing the probability of a given 
mission design resulting in accidental release of Martian organisms is a 
well-defined problem. The major portion of this report is devoted to the 
description and illustration of a method for making this assessment. Other 
components are much more difficult to provide. For example, modeling the 
preferences of society for the trade-off between scientific objectives 
and the probabilities of back-contamination is a very difficult task. 
Although a brief discussion of how the trade-off preferences of society 
may be represented in the decision-making process appears in the report 
additional research in this area is required. ’ 

Once a decision framework is established, the guidance required for 
decisions relating to sample return comes from inputs to the decision 
framework. Establishing these inputs, in particular, societal preferences 
for trade-offs, will not be an easy job, but the alternative approaches 
appear even less favorable. To quote Marvin Chrirtensen et al.^ of the 
Jet Propulsion Laboratory: 

Most knowledgeable engineers and scientist? feel that the 
back-contamination problem should not be treated on a numeri- 
cal basis as was the outbound program, at COSPAR' s behest. 

Furthermore, indications are that the approach — at least 
initially -- must be very stringent. The manner of defining 
how stringently quarantine should be treated, without express- 
ing the degree of concern or caution needed by a single numer- 
ical constraint is very nebulous. . .In general, what is needed 
is a governing philosophy that is adhered to, and supported by, 
all levels of organizations involved. 

We believe that a well-organized framework for decision making, together 
with an explicit and quantitative expression of the willingness of society 
to trade off risk against the benefits of space exploration, can provide 
the appropriate governing philosophy for MSSR mission planning. 
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This report describes and illustratei a methodology for assessing 
the risk of back-contamination from Mars Surface Sample Retirn (MSSR) 
missions. In addition, a decision framework is described for assisting 
mission planners in making decisions that trade-off increased mission 
costs or decreased science capability for a lower risk of back- 
contamination. 


1 . 1 Oblectives and Scope 

A complete assessment of the ri of back-contamination from an 
MSSR mission would require probability estimates for all elements in the 
risk chain, including the existence of life on Mars and the ability of 
Martian life forms to survive transport to Earth and to propagate in the 
Earth's biosphere. These issues were not addressed by the research de- 
scribed in this report. Rather, they are assumed to be true, and back- 
contamination is more narrowly defined. The methodology described is de- 
signed to assess the probability that Martian organisms collected and 
returned alive by an MSSR mission would, prior to their delivery to a 
planetary Ssrople Receiving Lab (PSRL), be inadvertently released into the 
Earth's biosphere and would survive the release. Thus, probabilities of 
back-contamination computed using the methods described in this report 
are based on the assumption that viable Martian organisms are contained 
in the return spacecraft. These probabilities do not include the risk ot 
back-contamination that might exist following transfer of the sealed sample, 
and associated responsibility, to the PSRL, To avoid misinterpretation, 
we refer to the methodology of this report as producing an assessment oi 
the probability of "potential back-information" rather than an assessment 
of the probability of "actual back-contamination." 

To illustrate the methodology, an analysis has been conducted of the 
risk of potential back-contamination for a "reference mission." This 
is a conceptual MSSR mission designed to return multiple unsterilized 
soil samples via a Mars orbit rendezvous with direct Earth entry. Since 
the reference mission has not been designed, the detailed numerical as- 
sumptions of mission design are purely hypothetical; however, an effort 
was made to obtain representative assumptions, subject to the time and 
budget constraints of the project. Consequently, the res'i’rg may be 
viewed as providing a preliminary evaluation of the potential back- 
contamination risk of a MSSR. 
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1.2 Methodology 




The proposed metho^’ology for assessing the risk of back-contamination 
consists of the procedures and methods generally used by decision analysts 
for determining the probability of a rare event. The rare events back- 
contamination in this case, is separated into the sequences of events that 
determine whether or not contamination occurs. Each event in the sequence 
is well defined and of sufficient probability to be comprehended without 
difficulty. The event sequences are represented as tree structures. 
Probabilities are assessed fo>* each of the events in the tree structure, 
and the laws of probability theory are used in combining these probabili- 
ties to obtain the overall probability of back-contamination. 

The tree structures represent systems models that capture for a par- 
ticular mission design the available information and uncertainties that 
determine the probability of back-contamination. Additional models con- 
structed to represent mission outcomes, in particular the scientific 
benefits of an MSSR mission and the consequences of contamination, may 
be combined to produce a framework for decision making. The usefulness 
of t 3 decision framework is that it serves to organize and clarify issues 
affc :ing a decision relating to an MSSR mission by providing a means for 
modeling complex causal sequences, for dealing with uncertainties, and for 
characterizing the trade-offs among conflicting objectives that the de- 
cision may entail. 


1.3 Major Findings 

A probability of potential back-contamination of approximately 1 
chance in 6,000 was obtained for the reference mission. Nearly all of 
the contamination r\sk is due to events occurring during Earth entry, and 
most of this is due to the risk of failure of the parachute system designed 
to slow the Earth-entry capsule. A number of essentially independent 
sources of risk contribute probability in the range of 10“6 to 10 * 5 . 

As a consequence, it is difficult to reduce the probability of potential 
back-contamination for the reference mission below about 1 in 100,000 
without simultaneously improving or eliminating a large number of risk 
sources. 

A preliminary analysis indicates that a lower probability of potential 
back-contamination, about 1 in 1 million, can be obtained if the entry 
mode chosen is orbital recovery rather than direct entry. The strategy 
would be to recover the sample in Earth orbit with the space shuttle, 
place it in a strong leakproof container, and then return it directly to 
an Earth-based PSRL. A somewhat higher mls:.ion cost may result for this 
alternative due to added complexity and the fact that a large velocity 
change would be required to put the capsule into a near-Earth orbit ac- 
cessible to the space shuttle. 
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1.4 Methodological Findings 


Analysis by tree structures is a flexible and efficient method for 
evaluating the risk of back-contamination from MSSR missions. In addition 
to providing a quantitative assessment of contamination probability 
prior to mission launch, the method of evaluation shows how this probabil- 
ity should be updated as information arrives during the course of the 
mission. 

Sensitivity studies performed on the systems models constructed 
using this methodology may be used to identify areas of critical uncer- 
tainty. Sensitivity study results may also be used to suggest mission 
design changes for reducing back-contamination risk. Evaluation of the 
impact of proposed mission design changes may be easily accomplished by 
an appropriate expansion of the tree structures to account for the changes 
in effectiveness and reliability of the altered systems. 


1,5 Recommendations 

The primary emphasis of this report is on a methodology for construct- 
ing a systems model to assess the probability of potential back- 
contamination for a specified MSSR mission design, but attention is also 
given to the role of this model within a framework for making decisions 
relating to sample return. Our major recommendation is that the method- 
ology for assessing contamination risk be extended and that additional 
methodologies be developed to provide the other components necessary for 
the realization of the decision framework. 


The probability of back-contamination cannot be accurately determined 
until an assessment is made of the elements of the risk chain not consid- 
ered in this report. Thus, Viking results should be used to develop mod- 
els for the biological characteristics of potential Martian life. This 
work would require an interdisciplinary team including both qualifi«>d 
biologists and systems modelers. 

The methodology for assessing contamination risk should be extended 
to permit the identification of a "best" mission design. This extension 
would be relatively straightforward. Finally, a methodology should be 
developed for assessing and operationalizing contamination penalties. 

The concept of a contamination penalty provides a logical means for con- 
sistently making trade-off decisions. However, additional research is 
needed to determine efficient methods for its assessment and use within 
a large technological project, such as an MSSR mission. 
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II METHODOLOGY 


In this chapter we define the distinction between "actual back- 
contamination" of Earth by Martian organisms and the issue of "potential 
back-contamination," which is studied in this report. The chapter con- 
cludes with a description of a methodology for calculating the probability 
of potential back-contamination. An il^ ustr’jtive application of the meth- 
odology is presented in Chapter III. 


2.1 Definition of "Actual Back-Contamina**-? c.n" 


For this study, we define "actual back-contamination" of Earth by 
Martian organisms to have occurred when at least one Martian organism 
is released from controlled containiient and reproduces in the Earth's 
biosphere using nutrients found on Earth for growth. For an MSSR mission 
to cause actual back-contamination of Earth by Martian organisms, the 
following must occur: 

(1) Living organisms are found on Mars. 

(2) Living Martian organisms are transferred to the return 
spacecraft. 

(3) At least one organism survives the return trip to Earth. 

(^4) A surviving organism escapes the spacecraft (or receiving 
laboratory) confinement. 

(5) It survives the escape. 

(6) It is transferred to the Earth's ecosphere. 

(7) It survives the transfer. 

(8) It finds a niche in the Earth's ecosystem where it 
reproduces. 

"Harmful contamination" implies two additional conditions: 

(9) The contaminating organism Vza an undesirable effect on 
man or his environment. 

(10) It Is hard to combat. 


2 . 2 Actual Back-Contamination Compared to "Potential Back-Contamination" 


Rather than attempt to cover all of the issues listed above, this 
report addresses only issues 3, 4, 5, 6, and 7. Thus, the methodology 


is contingent upon certain assumptions about the existence and biological 
properties of Martian organisms. It could be extended to relax these 
assumptions, but the extension would require considerable assifitance 
from qualified exobiologists. Since this work could profitably wait un- 
til the results of the Viking mission have been used to update the current 
understanding of the Martian environment, detailed modeling of the uio- 
logical properties of Martian organisms (assuming they exist) was not in- 
cluded in this research. Instead, these conservative simplifying assump- 
tions were made for assessment of the probability of back-contamination: 

(1) Living organisms exist on Mars. 

(2) Specific numbers of living Martian organisms are deposited 
in various areas of the return spacecraft. Chapter III and 
Appendix A give the detailed assumptions used in our illus- 
trative calculation. (Our base calculation assumes 10^ 

Martian organisms are contained in the return sample. The 
sensitivity of our results to changes in this assumption 

is explored in Chapter IV.) 

(3) Organisms contained in sample canisters remain viable on 
the return trip to Earth. Specific assumptions are made 
about the viability of organisms that may be accidentally 
pre.sent in other locations, such as on the exterior of the 
spacecraft. 

(4) Under all specified manners of release, the probability 
that any given Martian organism is able to find conditions 
sufficient for survival is independent of whether or not 
other released organisms survive. Given survival, the 
probability of growth is assumed to be unity. (These are 
very conservative assumptions. Using a survival probability 
for each organism of 10“3, contamination is virtually as- 
sured if 10^ or more Martian organisms are released to the 
biosphere. )* 

In view of the conservative nature of these assumptions, we refer to 
the methodology as being designed to assess the probability of "potential 
back-contamination." The assumptions above imply that the probability 


A relatively easy method for improving the growth model would be to note 
that there are certain overall generic traits that Martian organisms 
must have before they can survive on Earth; for instance, the ability 
to withstand Earth's temperature, pressure, and partial pressures of 
free oxygen, nitrogen and water vapor, as well as the ability to sur- 
vive without ozone, ultraviolet radiation, and the unconmon chemical 
compounds found in abundance on Mars. The approach would be to assess 
the probability that organisms adapted for life on Mars would possess 
those traits. If the organisms did not possess those traits, they could 
not grow on Earth. No contamination would result, Independent of the 
number of Martian organisms released to the Earth's biosphere. 


estimate will be an upper bound for the probability of actual back- 
contamination* A more accurate assessment of the probability of actual 
back-contamination would take into account the probalility of each of the 
conditions 1^ 2^ and 3 above, and a more realistic representation of the 
survival mechanism, which is very conservatively represented by condi- 
tion 4. 


2 . 3 Mission Phases 


For purposes of developing planetary protection policy, the MSSR 
has been described as consisting of three distinct phases.^ Phase 1 con- 
sists of the trip from Earth to Mars and the landing of a descent vehicle 
on the Martian surface. Phase 2 begins with sample acquisition, includes 
transporting the sample from the Martian surface to Earth's vicinity, 
atmospheric entry of the capsule, recovery of the sample, and transporta- 
tion to a PSRL. Phase 3 includes the initial quarantine and scientific 
investigation of the sample in the PSRL and ends with either certification 
that the sample is safe for release or, in the event that it is not re- 
leased, with its sterilization. 

The illustrative application of the methodology presented in Chapter 
III considers the risk of back-contamination due to Mission Phase 2; 
that is, events up to the recovery and transport of the sample to the 
PSRL. The method of analysis, however, is equally applicable to the risks 
of contamination following quarantine within the PSRL. 


This refinement can be accomplished in a straightforward manner. The 
probability of actual back-contamination is approximately given by 

P(AC) = P(L) X P(S) X P(C) X P(G) , 

where P(AC) = probability of actual back-contamination, 

P(L) = probability life exists on Mars, 

P(S) = probability samples contain Martian organisms that 
survive return to Earth, 

P(C) = probability of potential contamination computed by 
the methods described in this report, 

P(G) = probability returned Martian organism would reproduce 
on Earth. 

A more accurate formula would allow P(G) to depend on the mode and loca- 
tion of release of Martian organisms. One may even want to recognize 
various levels of contamination. 

A number of biologists hold that the probability of there being life on 
Mars that can survive in the Earth's biosphere is very small. Thus, the 
probability of actual contamination may be many orders of magnitude be- 
low the results computed in this report. 


2.4 Proposed Methodology 


I 

Our procedure for assessing the risk of contamination from MSSR mis- 
sions is a variation of the procedure generally advocated for determining 
the probability of rare events. The probability of a rare event is dif- 
ficult to assess for two reasons. First, because the event is rare, in- 
dividuals responsible for the assessment typically have little or no per- 
sonal experience with the event. Second, there is a basic difficulty in 
distinguishing small probabilities. If an event is very unlikely, is Its 
probability I in 10,000 or I in 100,000? If the consequences of the event 
are sufficiently important, such a distinction may be crucial. 

The procedure generally used is designed to alleviate these two dif- 
ficulties. Essentially, it involves breaking the rare event down into 
more familiar events whose probabilities can be evaluated more easily. 

The analysis is accomplished by identifying a set of mutually exclusive 
initiating events and the possible sequences of events that might follow 
each initiating event. 

For the present problem, the rare event is back-contamination from 
an MSSR mission# A pertinent example of an initiating event is failure 
of a parachute system designed to slow Earth entry of the capsule contain- 
ing the Mars sample. Parachute failure may initiate contamination through 
a number of event sequences, two examples of which are: (1) water impact, 

followed by capsule breakup, followed by survival of at least one organism; 
/ and (2) water impact, followed by no breakup, followed by capsule loss, 

V followed by pickup and sample exposure by an unauthorized individual. 

Figure 2.1 is an illustration of this approach as a tree structure. 

The far-left branch in the diagram represents the initiating event (para- 
chute failure). Each branch point, or node, in the tree represents an 
event that may or may not occur following parachute failure. Each path 
through the tree represents a sequence of events. Some of the paths lead 
to a condition of contamination, and some do not. (Chapter 111 contains 
a detailed discussion of this figure.) 

When the event is broken down in this way into sequences of more 
familiar events, the attention of the assessor can be directed toward the 
probabilities for each event in the sequence. The laws of probability 
theory may then be used to combine these probabilities to yield the prob- 
ability of the rare event as a whole. 

Analyzing back-contamination in this manner has several advantages: 

• It allows the systematic elucidation of all possible occur- 
rences relevant to back-contamination. 

• The individual contingent events are much easier to imagine 
than one complex sequence of events taken together, and the 
contingent probabilities of simple events are easier to assess 
than an overall probability of occurrence of a complex series 

( of events. 
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• One can Integrate the knowledge of different experts in differ- 
ent fields. 

• One can combine probability estimates of various types, 
based on historical failure rates, trajectory calculations 
given uncertainty in comnand and control operations, or 

an expert's subjective judgment. 


2.5 A Comparison with Earlier Work 

The methodology proposed in this report is essentially the same as 
tha' described in a previous report by Yen.8 Yen's approach, like ours, 
is to break down the event of back-contamination into risk elements initi- 
ating sequences of events that may lead to the release of Martian organ- 
isms into the Earth's ecosystem. Most of the risk elements and many of 
the estimated event probabilities used in the example application in 
Chapter III are, in fact, taken directly from Yen's work. 

The principal difference between the present approach and the approach 
followed by Yen is in application. As will be illustrated in Chapter III, 
our approach relies heavily on the graphical aid of tree representation 
to clarify and organize the assumptions made in the analysis. Representa- 
tion of the possible sequences of events as a tree structure makes it 
easier to determine whether events may be treated as probabilistically 
Independent, or whether the dependency among these events must be explic- 
itly represented in the analysis. In particular, this approach makes it 
clear that the approximation often referred to as the Sagan-Colman form- 
ulas cannot be used to evaluate the risk due to equipment failures that 
result in large numbers of organisms being released into the Earth's en- 
vironment, even if the probability of the release event is very small. 
Chapter III discusses this issue further. 

In addition to our reliance on tree representation, the present ap- 
proach emphasizes the use of sensitivity studies to indicate the areas 
for which extension of the analysis is most Important. Chapter IV illus- 
trates the use of sensitivity studies as part of the methodology for ana- 
lyzing the risk of back-contamination. It is also shown that sensitivity 
studies may be used to identify the Impact that improvements in reliability 
and other design changes can be expected to have on contamination risk. 


Ill ANALYSIS OF THE REFERENCE MISSION 


As described in Section 2. A, the methodology for assessing back- 
contamination probabilities requires: (1) Identification of the possible 

sequences of events leading to potential back-contamination and their 
representation as tree structures, (2) assessment of the conditional 
probabilities of each of these events, and (3) use of the laws of prob- 
ability to combine these probabilities to obtain the overal’ probability 
of back-contamination. This chapter illustrates the application of the 
methodology to a reference MSSR mission. Although we refer to the analysis 
as yielding a "probability of back-contamination," the reader should bear 
in mind that the quantity calculated is actually the probability of 
potential back-contamination, as defined In Sectlor 2.2. 


3.1 Definition of the Reference Mission 


The reference mission is a conceptual MSSR mission; Its basic 
structure was provided by Mr. Alan R. Hoffman of JPL, the technical mon- 
itor for this project. However, many of the mission details have been 
filled in by the authors. Since the risk of back-contamination Is found 
to be quite sensitive to several of the detailed assumptions of mission 
design, specific analysis results must be considered illustrative rather 
than definitive. A more careful numerical evaluation, using the methods 
demonstrated In this chapter, should be performed for the actual mission 
design effort. 

The reference mission Is an unmanned Mars mission designed to return 
multiple unsterilized samples via a Mars orbit rendezvous with direct 
Earth entry. Choice of the rendezvous mode for sample return requires 
two different vehicles at Mars: an orbit vehicle inserted into orbit at 

arrival and a lander. While on Mars, surface samples collected by the 
lander are individually sealed inside sample canisters, which In turn 
are sealed inside a single sample container. The seals are designed to be 
gas-tight (brazed, for example). Following ascent and during docking, 
the sample container is passed to the Mars orbit vehicle and sealed in- 
side the sample compartment on board the Earth-return vehicle. This seal 
Is also designed to be gas-tight. 

The return flight takes 340 days. The trajectory of the return 
vehicle Is assumed to be biased away from Earth to reduce the risk of 
accidental . Impact , and four midcourse corrections are assumed to be 
required . 

At Earth arrival, the Earth-entry capsule separates from the 
return vehicle and puts Itself on tne desired entry trajectory. After 
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separation and deflection, the Earth-entry capsule Is decelerated by the 
atmosphere to subsonic velocity. At an altitude of about 20 km. a parachute 
Is deployed to further decelerate the capsule to terminal velocity. To 
Improve reliability, two redundant parachute systems are used. Parachute 
deployment Is based on static pressure. The capsule Is recovered by an air 
snatch at an altitude of about 1.5 km. To reduce the likelihood of capsule 
loss in the event of a missed snatchy the capsule is equipped with a 
beacon, is designed to float, and will release a highly visible dye on 
high-velocity Impact. Once recovered, the capsule is transferred to a PSRL. 

Additional mission details are assumed as needed for the calcula- 
tions and are noted in the following pages. In particular. Appendices 
A through D contain more detailed quantitative assumptions about mission 
design and the reliability of various mission components, systems, and 
operations . 


3.2 Assumed Numbers and Locations of Martian Organisms 

As stated in Chapter II, assumptions are made concerning the numbers 
and locations of Martian organisms on the return vehicle. The reason- 
ing that led to specific assumptions is presented In Appendix A. 

Figure 3.1 Illustrates these assumptions. It is assumed that the 
sample canisters contain a total of 10^ Martian organisms. It is also 
assumed that the process of sealing the canisters inside the sample con- 
tainer encloses an additional 100 organisms inside the container*. The 
assumed presence of organisms on the outside of the container during 
rendezvous accounts for the contamination of the sample compartment on 
board the Earth-entry capsule by an additional 10 organisms. Finally, it Is 
assumed that the exterior of the return vehicle may be contaminated due to 
transfer of organisms from the Mars ascent vehicle. However, It is 
assumed that this probability Is sufficiently small, due to docking 
geometry, so that after ejection of the docking cone the expected number 
of organisms on the exterior of the return vehicle is assumed to be 0.02. 
Based on relative surface areas, 10% (0.002) of the expected surface or- 
ganisms are assumed on the Earth-entry capsule.* 


Mathematically, the "expected number of Martian organisms" is defined 
as follows. Suppose that with probability Pg there are no organisms 
present, with probability Pj^ there Is one organism, with probability 
P 2 there are two organisms, and so forth. The expected number of or- 
ganisms, n, is then. 


eo 



1 


1 = 0 


An expected number of organisms less than one Implies that most likely 
no organisms will be present. 
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FIGURE 3.1 ASSUMED ORGANISMS ON RETURN VEHICLE 














The sensitivity of the results of the analysis to these assumptions 
is investigated in Chapter IV. 


3 . 3 Risk Elements 


The first step in assessing the probability of back-contamination 
for the reference mlssl a is to identify the mission events that ini- 
tiate back-contamination risk and the resulting sequences of events 
that could lead to contamination. In all cases the posslblity of contamina- 
tion can be traced to some initiating risk event, ^’’or example, faulty 
sealing of a sample canister may ultimately result in contamination through 
leakage of organisms into the Earth's environment. Or, transfer of sur- 
face organisms from the Mars ascent vehicle to the Earth-return vehicle 
during rendezvous may ultimately result in contamination from organisms 
brought to Earth on the surface of the entry capsule. 

The reference mission was analyzed to Identify the major risk 
events that may initiate a sequence of events leading to back-contamination 
(see Fl<*ure 3.2). The events depicted initiate a risk of back-contamination 
either because they Influence the numbers and locations of Martian organ- 
isms on or inside the Earth-return vehicle, or because they are events for 
which a non-nomlnal outcome would Increase the likelihood of the release 
of organisms. An example of the latter is parachute deployment. If 
the parachute system falls, the risk of contamination due to containment 
failure is Increased substantially. 


3 . 4 Modes of Back-Contamination 


Contamination can occur by three distinct modes as a result of the 
reference mission. First, contamination can result from a major equip- 
ment failure causing the release of all or a substantial part of the 
sample into the Earth's biosphere. Failure of the parachute system 
followed by capsule breakup at Impact is one example. Second, contami- 
nation may result from leakage of one or more of the biological seals. 
Third, contamination might result from surface contaminants, that is, 
organisms located on the exterior of the Earth-return vehicle. 

To simplify the development of a tree diagram for the various se- 
quences of events that potentially lead to back-contamination, each of 
these three modes of contamination was considered separately. 


3.5 Major Eouipment Failure 

Figure 3.3 shows a gross tree diagram of the sequential and logical 
relationships among the most significant risk elements for major equipment 
failure. The first element is midcourse corrections. As noted in the 
description of the reference mission, the spacecraft return trajectory 
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FIGURE 3.2 SEQUENCE OF MISSION RISK ELEMENTS 






















1 1 ! 


£ I 1 1 
gl II 


sS 1 


o ^ s 

< e S. e 
5 u) Z 


FIGURE TREE DIAGRAM OF MAJOR EQUIPMENT FAILURE RISK EVENTS 



will be initially biased away from Earth to reduce the chance of acciden- 
tal collision. To obtain Earth capture^ a series of velocity changes 
(AV corrections) are applied. These are considered a risk element be- 
cause an Incorrect midcourse correction (including loss of spacecraft 
control) may Initiate a sequence of events leading to contamination. For 
example. Earth capture might be followed by uncontrolled atmospheric entry, 
capsule breakup, and survival of at least one organism. 

The next risk element of major equipment failure is Earth injection. 
Earth injection occurs when a course correction causes the capsule to enter 
Earth's atmosphere at a velocity and angle that permit satisfactory oper- 
ation of its heat shield and parachute system. Unsucce*.>sful Earth injec- 
tion will either result in no Earth capture of the capsule or atmospheric 
entry in a manner that is beyond the design limits of the capsule entry 
systems. The latter, of course, poses a risk of contamination. 

Given successful Earth injection, the next risk element is parachute 
deployment. Recall that the design of the reference mission calls for 
two parachute systems for Increased reliability. Assuming successful 
parachute deployment, the next risk element is the snatch attempt. Failure 
of the snatch attempt can result in contamination, for example, through 
breakage of the capsule upon surface impact. Finally, there is a contami- 
nation risk of accidental release during transportation of the sample to 
the PSRL. 

One additional risk element shown in Figure 3.2 falls into the cate- 
gory of major equipment failure (l.e., a risk elemer.c that potentially in- 
itiates a sequence of events leading to contamination through unintentional 
release of all or a major portion of the sample into Earth's environment). 
This is the risk of meteoroid Impact. The risk of meteoroid impact was not 
included in the gross tree structure of Figure j.3 because the probability 
of this event was judged to be small relative to the other risks consid- 
ered.* 


3.5.1 Petal lad Tree Diagram 

Non-nominal outcomes for each of the risk elements (Indicated by the 
dashed lines in Figure 3.3) would result in some probability of back- 
contamination. To determine the probability o^ contamination associated 
with each of the risk elements, the sequences of events that determine 
whether or not contamination occurs were identified and represented as 
detailed tree structure. 

Figure 3.4 shows the detailed tree diagram developed for parachute 
failure. The tree structure simply lays out each possibility for each 


*Yen^ estimates the probability of meteoroid puncture of the spacecraft 
to be on the order of 10"^. 









event relevant to contamination that would follow failure of the parachute. 
If the parachute falls, the first pertinent event Is whether the capsule 
hits water or land (land is defined as Including all hard or soft nonllquld 
surfaces). This event Is important because it Influences the likelihood 
that the capsule and sample will break up and the likelihood that any 
released organisms will survive. (In Figure 3.4, only the detailed struc- 
ture following water impact is shown; a similar structure, not shown, 
follows land impact). 

If the capsule hits water, it either remains intact or breaks up. 

If it breaks up, then either all of the organisms die, or at least one 
survives. For the analysis, contamination was defined as the survival 
of at least one Martian organism If all the organisms die, there is no 
contamination. 

The sequence of events just described— water impact, followed by 
impact breakup, followed by survival of at least one organism — is one 
possible sequence of events that might follow parachute failure. This 
sequence corresponds to one path through the tree structure. Another 
possibl '.llty is water impact with the capsule remaining intact. At this 
point the tree shows that there are two possibilities: The capsule may 

or may not be recovered. If it is not recovered, contamination can result 
from pick up of the capsule and exposure of the sample by an unauthorized 
individual. If the capsule is not picked up, contamination can result 
from sample release due to the natural deterioration and physical decay 
of the capsule and sample container. 

A detailed tree structure was constructed for the non-nomlnal out- 
comes for each of the risk elements in the category of major equipment 
failure. These detailed tree structures were then appended to the gross 
tree structure of Figure 3.3. Figure 3.5 shows the generic tree structure 
together with the detailed tree structure for the risk element parachute 
failure. The complete tree structure is shown in Appendix B. 


3.5.2 Conditional Probabilities of Contamination 


The various paths through the tree structure of Figure 3.5 represent 
a decomposition of the risk of contamination from major equipment failure 
into particular risk elements and sequences of events that may or may not 
lead to contamination. The next step in the analysis Is to assess the 
probability of contamination associated with each of these possible 
sequences of events; that Is, to assess the probabilities of contamination 
that should be associated with the end points of the tree structure. We 
refer to these probabilities as conditional probabilities of contamlmition. 
The rules of probability theory will then be used to combine the condi- 
tional probabilities Into an overall probability of contamination. 

As an Illustration of how the conditional probabilities of contamina- 
tion may be determined, consider one path through the tree structure of 
Figure 3.5: Suppose that midcourse corrections are successful, earth 
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injection Is successful, the parachute system fails, and the capsule hits 
water and breaks up. Capsule break-up is defined as an event during 
which all of the seals guarding at least one of the sample canls 
broken. Under these circumstances an appreciable f ° 

of the caosule. assumed to be 10^ Martian organisms, will be released. 

The conditional probability of contamination associated with 

is the probability that at least one of the organisms thus released w 1 

survive . 

The probability that at least one of N organisms survives depends 
on the probability distribution describing the fraction f of 
organlsL that are able to survive on Earth under the given 
of Release. Assessment of this distribution is not an easy ®ejter sine 
it requires answers to questions of the following form; If a larg 
number of Martian organisms were released on Earth in the manner described 
aS!^r Shat is the probability that not more than 0.1% of those organisms 
Sord’sSiSJve? TigSre 3.6 shLs the form of cumulative distribution that 
might be constructed from judgments of this type. It can e ® 
ematically that this distribution is consistent with an expect 
of surviving organisms of approximately 10 '^ and a probability 
10-2 that at least one organism survives.* Therefore, assuming the distrl 
iStloS of nguSS 3.6, the conditional probability of contamination given 
successful midcourse corrections, successful earth injection, par»c u 
failure, and water impact with break up is 0.01. 

Application of this method for assessing the conditional probabilities 
of contamination would require the assessment of distributions ^e 
fraction of surviving organisms for each path through the tree structure. 
Such assessments could be ''acilitated by the development of biological 
models for Martian organisms that reflect post-Vlklng knowledge of t e 

Martian environment. 

The computation of the probability that at least one out of « 
of oreanlsms survives can be simplified greatly if an assumption is made 
that the life or death of each organism is statist! :ally , 

tilfufe or death of any other organism. With this assumption, the only 

assessment that must be provided is the ^hat 

organism survives. If this probability is p, then 

at least one out of N released organisms survives, denoted Pc, is given 
by the Bernoulli model: 


- 1 - (1 - p)^ • 

If we assume that any given organism released into the Earth's 

in ^he manner described above has a probability of survival of 10 3. then 


*For further discussions and an illustration of how this calculation is 
performed, see Harrison and North.'* 





if 10^ organisms are released, the Bernoulli model gives a probability 
of l-(4.5 X 10 ” 5 ) that at least one of those organisms survives. Thus, 
for this example the independence assumption yields a computed conditional 
probability of contamination for the given path that is roughly 100 times as 
large as that calculated using the more general model (1 compared to 10~2) . 

A consequence of the Bernoulli model is that if the number of organisms 
exceeds the reciprocal of the probability of survival by an order of mag- 
nitude or more, then the probability of contamination is nearly unity. 
Clearly, the assumption of independence is a very conservative one.* 

An even simpler model that has been used^ is the approximation to 
the Bernoulli model. 


p » 1 - (1 - p)** i p X N for p X N « 1 

This approximation is sometimes referred to as the Sagan-Coleman formula.^ 
Since for this example p )< N » 10 >1, the approximation is obviously 
not valid in the analysis of the probability of back-contamination from 
major equipment failure. 

Since data from the Viking mission were still accumulating at the 
time of this analysis, and since the development of biological models 
describing the possible survival mechanisms of Martian organisms on 
Earth was outside the scope- of this study, the simplifying assumption 
of statistical independence was made for the analysis of the reference 
mission. However, note that a reduction in the calculated probability 
would be expected if more detailed calculations of the distributions 
for the fractions of organisms surviving were carried out. 

Figure 3.7 shows the tree structure for major equipment failure with 
the conditional probabilities of contamination for several paths through 
the tree computed using the Bernoulli model. The complete tree structure 
with all of the conditional probabilities of contamination is given in 
Appendix B. 


3.5.3 Event Probabilities 

We have already assessed the probability of contamination associated 
with each path through the tree diagram for major equipment failure. The 
next step is to determine the relative likelihood of the paths. A typical 
assessment required is the following. Suppose midcourse corrections are 
accomplished as planned and Earth injection is within the nominal cone 


*It can be shown that the probability computed from the Bernoulli model 
will always be equal to or greater than the probability that would be 
computed from an equivalent model that assumes some degree of dependence. 
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of entry, what Is the probability that the parachute will fall? Naturally, 
the answer to such a question requires that details of the mission design 
be specified. The reliability of the parachute system depends, for example, 
on specific details of the Earth-entry trajectory, including the velocity 
and altitude at the time of parachute deployment, as well as details of the 
parachute and deployment systems, including the extent to which redundancy 
is used to improve reliability. 

The authors worked with various individuals at JPL to specify the 
details of the reference mission and to estimate reasonable probabilities 
for each of the outcomes of each of the events shown as branches in the 
tree structure. The assumptions made and probabilities agreed upon are 
summarized in Appendix B. Figure 3.8 shows some of these probabilities. 

The estimated probabilities for the outcomes for each of the events are 
noted under the corresponding branches in the tree. A true structure with 
event probabilities represented in this way is called a probability tree. 

The event probabilities shown under the branches are conditioned 
on the paths leading to the branches. For example, the probability under 
the branch labeled IMPACT BREAKUP is 0.3. This means that the assessed 
probability that the capsule and sample container will break up on impact 
is 0.3 assuming successful midcourse corrections and nominal Earth injec- 
tion with parachute failure followed by water impact... Any changes in 
these assumptions would result in assignment of a different probability of 
impact breakup. For example, successful Earth injection followed by para- 
chute failure followed by impact with a hard (nonllquld) surface (a 
sequence not represented in Figure 3.8) is assessed to have probability 

of 0.99 of impact breakup. 


3 , 5.4 Computation of the Probability of Back-C ontamination 

The probability tree provides a graphical aid for combining event prob- 
abilities with conditional probabilities to obtain the overall probability 
of back-contamination. The method of computation uses what is commonly 
called a "tree roll-back procedure," which is based on the expansion prin- 
ciple of probability theory; The conditional probability of back- 
contamination associated with any node in the tree is found by multiplying 
the probability of each branch emanating from that node times the condi- 
tional contamination probability associated with the subseqent node on 
that branch and then adding the products for all branches leading from 
that node. Using this rule, the conditional contamination probability 
associated with each node in the tree can be computed starting first with 
the right -most nodes and using the results from these calculations to 
work back through the tree. 

Appendix B reports the detailed results of applying the roll-back 
procedure to the probability tree; Figure 3.9 summarizes some of these 
results. The reader may verify that the conditional contamination prob- 
abilities, shown in boxes under nodes in the tree, equal the sum of the 
products of the branch probabilities times the conditional contamination 
probabilities of subsequent nodes. 
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FIGURE 3.8 PROBABILITY TREE FOR MAJOR EQUIPMENT FAILURE 




FIGURE 3.9 PROBABILITY TREE WITH ROLL-BACK RESULTS 
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Each of the conditional contamination probabilities is the proba- 
bility of back-contamination, given that the events leading up to that 
node have occurred. In particular, the number in the box under the left- 
most node at the trunk of the tree, 1.6 X 10"^, is the overall (prior) 
probability of contamination for the risk category major equipment failure. 
The conditional probabilities in the boxes under the other nodes in the 
tree show how the probability of contamination would change, given the 
occurrence of various events. For example, the box under the node "impact" 
leading from the branch "parachute failure" contains the number 0.67. 

This indicates that if the mission proceeds in such a way that midcourse 
corrections are successful. Earth Injection is successful, and then the 
parachute system falls, at the instant just prior to impact the probabil- 
ity of contamination is 0.67, or 2 chances out of 3. 


3.5.6 Identifying Major Sources of Risk 

The contribution of the risks associated with any node in the proba- 
bility tree to the total probability of contamination can be obtained 
by multiplying the conditional probability at that node by the product 
of the probabilities along the path leading to the node. Probabilities 
obtained in this way are shown in the ovals in Figure 3.10. The results 
show that the basic risk elements in the category of major equipment 
failure contribute to the probability of contamination as follows: 


Table 3.1 


BASIC RISK ELEMENT PROBABILITIES 


Risk Element 

Contributed Probability 
of Back Contamination 

Midcourse failure 

9 X 10-7 

Earth injection 

9 X 10-6 

Parachute failure 

1.3 X 10"^ 

Snatch failure 

1.7 X 10-5 

Transportation accident 

2.9 X 10-6 

Total 

1.6 X 10-^ 




Of the total 1.6 X 10“^ probability, 1.3 X 10“^ is due to sequences 
of events involving parachute failure. Thus, parachute failure is the 
single most Important risk element In the category of major equipment 
failure. This contribution is due to the assessed probability of 2 x 10~^ 
of failure of the parachute system and the fact that contamination follows 
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FIGURE 3.10 PROBABILITY TREE WITH ROLL-BACK RESULTS AND RISK CONTRIBUTIONS 





psrflchute failure wllh a probability of 0.67. As described in Appendix 
the probability 2 X 10-^ of parachute failure is based on an assumption of 
two redundant parachute systems. 


3.6 Leakage 

This section describes the analysis of the probability of back- 
contamination due to leakage of one or more of the reference mission's 
biological seals. As described previously, the reference mission relies 
on triple seals to contain Martian organisms: a sample canister seal, 

a sample container seal, and a sample compartment seal. Thus, leakage 
of organisms from the sample requires failure of not one but three bio- 
logical seals. 

The r^sV. of contamination through leakage, however, is not limited 
to leakage of organisms from the sample. Both the interior of the 
sample compartment and the interior of the sample container may be 
contaminated with Martian organisms. Therefore, in addition to consid- 
ering the risk of leakage of organisms from the sample, the analysis 
also considers the risk that seal failure may lead to release of viable 
organisms that contaminate the interior of the sample compartment and 
sample container. 

The nominal assumptions for the numbers and locations of Martian 
organisms were depicted in Figure 3.1. The assumed total number of Martian 
organisms in the sample is 10^. It is assumed that the interior of the 
sample container is contaminated with an additional 100 organisms and 
that the sample compartment becomes contaminated during rendezvous with 
an additional 10 organisms. Appendix A contains a discussion of consid- 
erations that led to these assumptions. In Section 4.3, the sensitivity 
of analysis results to the assumptions is checked. 

In Figure 3.2, two risk elements in the category of leakage are 
shown: The risk of leakage during heliocentric transfer of the Earth- 

return vehicle and the risk of leakage during entry of the Earth-entry 
capsule. For an organism leaked during heliocentric transfer to cause 
contamination, it not only must survive atmospheric entry, it must also 
survive ultraviolet radiation during transfer and be captured by Earth. 

Thus, organisms leaked during heliocentric transfer are less likely to 
result In back-contamination than organisms leaked during atmospheric 
entry. If a faulty seal results in leakage during heliocentric transfer, 
additional leakage during Earth entry is, of course, highly likely; how- 
ever, the pressure difference during entry will make particle escape more 
difficult. 

Since there are three sources of leakage (sample compartment, 
sample container, and sample canister) and two mission phases during 
«rhlch leakage may occur (heliocentric transfer and Earth entry), there 
are six leakage modes to consider. With the exception of canister leak- 
age during heliocentric transfer and compartment leakage during heliocentric 


transfer^ each o£ the leakage modes is assumed to result in the release 
of 17. of the exposed organisms. In the other two cases, 10% of the organ- 
isms within the sample are assumed ejected since the pressure difference 
under these failure modes will favor .'.eakage. 

Figure 3.11 shows the probability tree constructed for analyzing 
the probability of back-contamination due to tiia risk of leakage during 
Earth entry. A similar tree for leakage during hellorAntric transfer is 
given in Appendix C. The conditional probabilities of bacic-contamlnation 
associated with the various paths through the tree are computed using the 
Bernoulli model as was done for the risk category of major equipment 
failure. Notice that for each leakage mode, the number of exposed organ- 
isms Is small compared to the reciprocal of the assumed probability of 
survival per organism, lO"^. In this case the Sagan-Coleman approxima- 
tion applies -- the probability that at least one organism survives Is 
very nearly the product of the number of organisms released and th^ prob- 
ability of survival per organism. 

The probabilities under the branches of the tree In Figure 3.11 are 
the probabilities assessed for the leakage events. The failure probability 
of the seal on the sample compartment Is assumed to be 1 chance in 100. 

If the sample compartment seal falls, the sample container seal is assumed, 
to fall with probability 1 in 100. Similarly, failure of both the com- 
partment and container seals will be followed by failure of a canister 
seal with probability 1 in 100. An explanation for these assumptions is 
given in Appendix C. 

Conditional probabilities of contamination obtained using the roll- 
back procedure are shown In the boxes under the nodes of the tree. The 
total probability of contamination shown In the box under the initial node 
Is 1.3 X 10'^. Table 3.2 summarizes the contributions from the various 
risk elements. Also Included In the table are the results oa the analysis 
of heliocentric leakage. One may observe from these numbers that the lar- 
gest component of the risk during Earth entry Is due to the risk of com- 
partment leakage. Leakage during heliocentric transfer contributes an in- 
significant risk compared to leakage during Earth entry. 


3.7 Surface Contaminants 


This section summarizes the analysis used to obtain the contribu- 
tion to the probability of back-contamination due to organisms that may 
be located on the exterior of the Earth-return vehicle. Because the 
mission design calls for a Mars-orbit rendezvous, the return vehicle 
does not come into direct contact with either the Martian surface or 
atmosphere. However, organisms may be transferred to the return vehicle 
during the docking maneuver with the Mars-ascent vehicle. 



FIGURE 3.11 PROBABILITY TREE FOR LEAKAGE DURING EARTH ENTRY 
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LEAKAGE RISK ELEMENT PROBABILITIES 


Risk Element 

Probability of Back-Contamination 

Organisn.8 leaked during 


heliocentric transfer-- 




Compartment leakage 

2,7 X 10 



Container leakage 

1.7 X 10 


, ^ s«-ll 

Canister leakage 

6 . 3 X 10 

Organisms leaked during 


Earvh entry — 


Compartment leakage 

1.2 X 10“° 

Container leakage 

2.0 X 10“' 

Canister leakage 

l.l X 10"^ 


3.7.1 Ni:wber of Organisms Transferred to the Earth-Return Vehicle 

As shown in Figure 3.1, the expected number of organisms assumed 
to be transferred to the Earth-return vehicle during rendezvous is 0.02. 
This number depends critically on docking geometry. Figure 3.12 shows 
i the orientation assumed for the ascent vehicle and the orbit vehicle just 

before docking. The orbit vehicle will approach the ascent vehicle and 
orient itself so as to accept transfer of the sample container. The two 
vehicles may keep station in this orientation for several days. Then the 
orbit vehicle will move forward and latch itself to the ascent vehicle. 

The sample container will be transferred to the sample compartment inside 
the Earth-entry capsule. Finally, the orbit vehicle and Mara-ascent 
vehicle will disengage with the docking cone remaining attached to the 
Mars-ascent vehicle. 

Transfer of surface organisms can happen when particles are dislodged 
from the ascent vehicle by the slight bump that may occur when the ascent 
vehicle and orbit vehicle make contact. Most of the particle transfer 
that occurs in this way will depend on a line-of-sight path to the Earth- 
return vehicle. In this respect, the docking cone functions as a bio- 
shleld. 

Transfer may also occur during the station-keeping phase. There will 
be no line of sight then, but particle transfer may result from the inter- 
play of solar radiation and electrostatic forces. 

With this geometry, and assuming worse case conditions, the expected 
number of organisms transferred was calculated to be 0,02. The detailed 
assumptions behind this estimate appear In Appendix C. 

( 
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3.7.2 Paths Followed by Surface Contaminants 


Organisms located on the exterior of the Earth-return vehicle may 
enter the Earth's environment either on the surface of the Earth-entry 
capsule or because they are dislodged prior to capsule recovery and fol- 
low a trajectory that results In Earth capture. Figure 3.13 summarizes 
the assumptions made concerning the expected fraction of surface organ- 
isms that would follow various paths that may or may not lead to con- 
tamination. Since the numbers of organisms are less than one, these may 
be Interpreted as probabilities that a given organism would follow each 
of the possible paths. 


0.02 



ON THE EARTH-RETURN VEHICLE EXTERIOR 


As Indicated by the figure, 30 percent of the surface organisms are 
assumed to be ejected by vibrations caused by micrometeoroid impact. The 
ejection is assumed to be roughly uniform over time. Those organisms that 
are ejected during the last 30 days of the 340-day return trip are assumed 
accessibl'.e to possible Earth capture. Organisms dislodged by the last 
two midcourse corrections are also assumed to be available for Earth 
capture. Of the remaining organisms, 1 percent are assumed dislodged 
during each of the last two midcourse maneuvers. Of the organisms that 
are not dislodged, 10 percent are assumed to be located on the Earth- 
entry capsule; all others remain on the discarded return vehicle. Of the 
organisms on the entry capsule, 1 percent are assumed to be dislodged by 
Earth injection. 


3.7.3 Summary of Results — Surface Contaminants 

For a dislodged organism to cause contamination, it must survive 
heliocentric transfer, be captured by Earth, and survive once it enters 
Earth's atmosphere. An organism that remains on the entry capsule may 
cause contamination only if it survives heliocentric transfer and capsule 
heatup during entry. The tree structures that represent these sequences 
of events are given in Appendix C together with the results of the tree 
roll-back. The table below summarizes the contamination probabilities 
contributed by each of the risk elements: 


Table 3.3 

SURFACE ORGANISM RISK ELEMENT PROBABILITIES 


Risk Element 

Probability of Back-Contarolnatlon 

Organisms dislodged by 

4.2 X 10'^^ 

Third midcourse correction 

Fourth midcourse correction 

2.1 X 10"^^ 

Micrometeoroid Impact 

2.1 X 10"^° 

Earth Injection 

1.4 X 10"^ 

Organisms on capsule 
exterior at Earth entry 

1.4 X 10"® 

Total probability due to 
surface organisms: 

1.6 X 10’® 


3.8 Summary of Results of the Analysis of the Reference Mission 

Table 3.4 summarizes the probabilities of back-contamination for 
each of the three risk categories analyzed. The total probability is 
due almost entirely to the risk of major equipment failure. Most of the 
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Table 3.4 


SUMMARY OF BACK-CONTAMINATION PROBABILITIES 
FOR REFERENCE MISSION 


Risk CateKory 

Probability of 
Back-Contamination 

Major Source 
of Risk 

Major equipment failure 

1.6 X 10"^ 

Parachute failure 

Leakage 

1.2 X 10"^ 

Leakage of sample com- 

Surface contaminants 

1.6 X 10"® 

partment seal during Earth 
Entry 

Organisms located on Earth 

Total 

1.6 X 10"^ 

i 

Entry capsule at time of 
Earth Entry 


probability o£ back-contamination associated with major equipment failure 
is due to the risk of parachute failure and the fact that parachute failure 
leads to contamination with rather high probability. The risk of contamin- 
ation due to leakage is two orders of magnitude lower, and the probability 
of contamination due to surface contaminants is smaller still. In the 
category of leakage, the major source of risk is leakage of the compart- 
ment seal during Earth entry. In the case of surface contaminants, the 
major source of risk is organisms that remain on the Earth-entry capsule 
through Earth entry. Surface organisms dislodged by vibration are of 
little importance. 

Note that the extension of the analysis to include a model for the 
survival of released Martian organisms may indicate that the risk of 
contamination due to major equipment failure is less important relative 
to the other two categories than is indicated here. As discussed in 
Section 3.5.2, the conservative assumption that each Martian organism 
lives or dies with independent probability has the effect of virtually 
guaranteeing survival of at least one organism if a large enough number 
of organisms are released. Since major equipment failure is the only 
risk category that may result in a large number of organisms being 
released, more detailed modeling of the generic capability of Martian 
organisms to survive on Earth will affect the risk assessment for major 
equipment failure more severely than the other two categories. If, for 
example, a model for survival such as that shown in Figure 3.6 were used 
instead of the independence assumption, the assessment for the probability 
of back-contamination due to major equipment failure would be reduced by 
about two orders of magnitude. The assessments for the other two cate- 
gories would be insignificantly affected. 

Since the major risk sources identified occur during the Earth-entry 
phase of the mission, it may be useful to consider alternative ways of 
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retrieving the sample that bypass direct Earth entry of the capsule. For 
example, Appendix E discusses orbital recovery, In which the capsule Is re- 
trleved In Earth orbit, sealed In a protective box, and then returned with 
the shuttle for analysis In an Earth-based receiving laboratory. The pre- 
liminary analysis In Appendix E shows that this approach has the potential 
for a significant reduction In the probability of back— contamination at a 
somewhat higher mission dollar cost. 

The next chapter investigates the sensitivity of the results of this 
chapter to the detailed numerical assumptions made In the construction of 
the probability trees. 


IV 


SENSITIVITY ANALYSIS OF THE REFERENCE MISSION 


Many ad hoc assumptions were made in arriving at the probability of 
back-contamination for the reference mission of 1.6 x 10"^.* Although the 
method of analysis — probability theory and the principle of decomposi- 
tion -- is perfectly general, the particular probability trees that were 
developed to model the reference mission embody many assumptions that 
could be relaxed through more detailed modeling. 


For example, an assumption is made throughout the analysis that the 
sample canisters contain a total of 10* organisms. Instead, additional 
nodes and branches could be added to the tree structures to represent other 
possibilities. One branch could be added to indicate an outcome of the 
sampling that resulted in no organisms being contained in the samples, 
another to indicate an outcome in which only a very small number of viable 
organisms were obtained, and a third to represent a situation in which a 
very large number of organisms were obtained. Another mathematically 
equivalent approach would be to compute the probability of contamination 
for all possible numbers of organisms in the sample. A probability dis- 
tribution for the number of organisms in the sample could then be devel- 
oped, and the probability of contamination wc uld be obtained by integrat- 
ing the result over this distribution. 

Clearly, the analysis could be Improved in many such areas. Fre- 
quently, though, it is most efficient to construct a relatively simple 
probability tree model, as we have done here, before attempting to cap- 
ture all of the available knowledge relevant to the problem with a more 
complicated model. This is because the simple model can be used as a 
basis for sensitivity studies that identify those aspects of the Initial 
analysis whose refinement is most likely to influence analysis results. 

This chapter describes sensitivity studies conducte-* on the analysis of 
the reference mission and the implications of the results of these studies. 


4. I Individual and Joint Sensitivities 

Two kinds of sensitivity studies were performed on the probability 
tree models developed for the reference mission: single variable sensi- 

tivities and cumulative sensitivities. In a single variable sensitivity 
analysis of a model, one of the inputs to the model is varied over a range 
of values while the other inputs are held constant. This determines the 


\gain the reader is reminded that this is the probability of "potential 
back-contamination," not the probability of "actual back-contamination." 
See Section 2.2 and the comnent at the beginning of Chapter III. 
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sensitivity of the model outputs to that input. In a cumulative sensi- 
tivity analysis, two or more Inputs are simultaneously varied by propor- 
tional amounts while observing the effect on the outputs. 

For the analysis of the probability of back-contamination from the 
reference mission, the model consists of probability trees. The Inputs 
to the model are the various assumptions that are either explicitly or 
implicitly embodied in the tree, such as the event probabilities noted 
under the tree branches and the numbers and locations of Martian organ- 
isms assumed for the computation of the conditional contamination prob- 
abilities at the ends of the tree. The outputs of the model are the 
probabilities of back-contamination produced by the roll-back procedure, 
in particular the overall probability of back-contamination associated 
with the initial node of the tree. 

Thus, single variable sensitivities were obtained for the reference 
mission analysis by individually varying each assumption and recomputing 
the tree roll-back values. Cumulative sensitivities were obtained by 
simultaneously varying several assumptions. The following sections sum- 
marize the results. The work is organized by risk element category. 


4.2 Major Equipment Failure 

Figure 4.1 is a sensitivity result showing how the probability of 
contamination by major equipment failure depends on the number of organ- 
isms assumed in the sample. Specifically, the figure shows the probabil- 
ity of back-contamination plotted as a function of a factor by which the 
nominal assumption is multiplied. If the factor is unity, one has the 
original assumption of 10^ organisms in the sample, which gives the 
previously obtained probability of contamination of 1.6 X 10 . If the 
assumed number of organisms is decreased by a factor of 0.1, to 10 , 
then the probability of contamination drops slightly, to about I X 10" . 

As illustrated by Figure 4.1, as long as there are 103 or more organ- 
isms in the sample, the probability of contamination is about 10’^. If 
the number is dropped below 10^, then the probability of contamination 
drops almost proportionally* 

Figure 4.2 shows two more sensitivity results in the category of 
major equipment failure. One curve shows how the probability of con- 
tamlnatlon depends on the assumed probability of Earth capture of the 
capsule in the event of midcourse failure. Interestingly, it shows that 
the risk of back-contamination is rather insensitive to the Earth-capture 
probability. For the reference mission, the bias of the return trajec- 
tory away from Earth could be relaxed so that probability of Earth cap- 
ture in the event of midcourse failure was increased by a factor of 100, 
to 10-2; this would have an Insignificant effect on the total probability 
of contamination from the mission. 

The second curve in Figure 4.2 shows the sensitivity of the proba- 
bility of back-contamination to the probability of parachute failure. 
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Parachute failure la the dominant risk element In the category of major 
equipment failure; even allowing for two redundant parachutes, the 
probability of parachute failure contributes 1.3 X 10~^ out of the total 
probability of 1.6 X 10~^. As illustrated In Figure 4.2, If the proba- 
bility of parachute failure Is higher than assumed, the probability of 
contamination increases rapidly. On the other hand, the maximum reduction 
In the probability of contamination that can be obtained by Improving 
the reliability of the parachute alone Is less than one order of magnitude. 

Because the parachute system contributes such a large proportion of 
the total back-contamination risk, little would be gained by decreasing 
the contribution of other risk elements. On the other hand, the overall 
contamination probability will be Increased If one Increases the risk from 
other risk elements to a level commensurate with the risk from parachute 
failure. Figure 4.3 Illustrates this point with sensitivity results to 
the probability of missing the snatch and the probability that the cap- 
sule will be broken apart during the snatch attempt, perhaps by collision 
with the airplane attempting the snatch. Figure 4.4 shows the sensitivity 
to the chance of non-nomlnal Earth Injection (which could be caused by 
the solid fueled rocket falling to burn completely). A drastic reduction 
In any of these probabilities does not materially reduce the overall 
probability of back-contamination; a large Increase is eventually reflected 
In the overall probability. 

Figure 4.5 shows the sensitivity of back-contamination probability 
to the probability that the capsule would fail to be recovered * the 
event of parachute failure. (The chances of recovering the capsule de- 
pend on the nature of tne surface It hits — water, land, etc. -- and on 
whether or not It breaks up on Impact. Recovery of the capsule In the 
event It has broken up Implies the recovery of the major part of the sam- 
ple and the Initiation of efforts to sterilize the area.) If recovery is 
assumed, the probability of contamination Is reduced by about a factor 
of three from the nominal case. 

Figure 4.6 shows the sensitivity of the probability of back- 
contamination to the probability of survival of a single organism. This 
calculation has been performed using the assumption of Independence dis- 
cussed In Section 3.5.2, which provides a very conservative estimate for 
the probability of contamination under a given method or <*ample release. 

The contamination probability is insensitive to Increases In the survival 
probability assumed for an Individual organism. This Is because the In- 
dependence assumption virtually guarantees contamination for most paths 
through the major equipment failure probability tree that result In ..am- 
ple release. 

Figure 4.7 shows a series of cumulative sensitivities. Curve a, 
reproduced from Figure 4.2, shows the sensitivity of contamination 
probability to the probability of parachute failure. As the probability 
of parachute failure Is reduced by about an order of magnitude, the 
effect on back-contamination risk levels off. At this point, the other 
risk elements begin to make major contributions, and reducing the chance 
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of parachute failure further has little effect on the overall contamina- 
tion probability. Curve b represents the case where the two most Individ 
ually sensitive reliabilities, the probabilities of parachute failure and 
capsule breakup during the snatch attempt, are simultaneously varied. If 
both of these probabilities can be lowered, the probability of back- 
contamination Is reduced somewhat further. Curves c, d, e, and f repre- 
sent the cases v^ere additional risk elements are successively added to 
the sensitivity analysis. In order to achieve an overall contamination 
probability below 10~^, one needs to Improve at least four probabilities 
by at least an order of magnitude each. 


4.3 Leakage 

Figure 4.8 shows the sensitivity of the probability of contamination 
due to leakage to the number of Martian organises assumed In various 
locations. Again the risk Is rather Insensltlva to the number of organ- 
isms in the sample Itself. On the other hand, the probability Is sensi- 
tive to the number of organisms in the sample compartment. Thus, a mech- 
anism for reducing the number of organisms that contaminate the sample 
compartment would be a way to reduce the back-contamination risk due to 
leakage for the reference mission. 

Figure 4.9 shows several more sensitivity result's In the category of 
leakage events. One curve shows the sensitivity of contamination to the 
reliability of the sample compartment seal f^lle the other curve shows 
Che sensitivity to the reliability of the sample canister seal. 


4.4 Surface Contaminants 


Figure 4.10 shows two sensitivity results for the category of con- 
tamination due to surface contaminants. The most sensitive assumption In 
this category Is the number of organisms on the entry capsule at the time 
of atmospheric entry. 


4.5 Conclusions 


The sensitivity studies indicate the assumptions made In the analysis 
of Che reference mission that most critically affect the probability of 
back-contamination. Many of the most sensitive parameters found In the 
sensitivity studies may, to a certain extent, be controlled by the design 
of the reference mission. Since the reliability of the parachute Is the 
most sensitive single source of risk, we can conclude that risk may be 
reduced either by improving the reliability of the parachute system or by 
providing methods for sterilizing or inclneraCli ; the sample In the event 
of parachute failure. (Chapter V treats the latcer case.) The other 
sensitive area for Improvement has to do with leakage. The risk of back- 
contamination due to leakage can be reduced If the reliability of the seal 
on the sample compartment Is Improved or If the number of organisms In 
the sample compartment can be reduced--for example, by using a thin 
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exothermic coating that Is Ignited Just prior to the sealing of the sam- 
ple compartment.^ It Is difficult to reduce the probability of back- 
contamination by more than about an order of magnitude because this would 
require simultaneous attention to several factors. 

The most sensitive assumptions of all^ of course^ are the assumptions 
about the existence and viability of life on Mars. The analysis described 
In Chapter III not only assumes that life exists. It assumes that organ- 
isms will be transferred to the spacecraft and that the organisms In the 
samplies will survive the return trip to Earth. A very conservative assump- 
tion Is made concerning the survivability of Martian organisms on Earth. 

The assumption is that each released organism independently survives or 
dies with the same probability, depending on the manner of release. As 
described earlier, this has the effect of virtually guaranteeing that at 
least one Martian organism will survive If a large enough number are re- 
leased. 

To obtain the actual probability of back-contamlnatlon, the proba- 
bility of contamination computed for the reference mission must be reduced 
by consideration of the probabilities that (1) life exists on Mars, (2) 
living organisms will be transferred to the spacecraft and survive the 
return trip to Earth, and (3) Martian organisms will be capable of sur- 
viving on Earth. Therefore, the computed probability of back-contamlnatlon 
Is most sensitive to the conservative assumptions made concerning Martian 
biology. We must conclude that an analysis designed to assess the proba- 
bilities of possible characteristics of Martian organisms is essential 
for an Improved estimate of the actual risk of back-contamlnatlon. 


As mentioned In a report by Jaffe et al.,^ the risk due to leakage could 
also be reduced by Installing one or more transducers to detect pressure 
changes In either the sample compartment or sample container. Signifi- 
cant pressure changes would indicate seal failures that may be sufficient 
cause for a mission abort. 


V MAKING DECISIONS ABOUT ALTERNATE MISSION PLANS-- 
THE USE OF A CONTAMINATION PENALTY 


In the previous chapters we described and Illustrated a methodology 
for assessing the probability of potential back-contamination for MSSR 
missions. The real power of the methodology^ however, is that it pro- 
vides a framework for making decisions among various mission designs. 

One of the most basic mission decisions is the means of bringing the 
sample to Earth (e.g., direct Earth entry versus orbital recovery versus 
analysis in an orbiting laboratory). Other decisions are in the context 
of the overall mission plan chosen; assuming direct Earth entry, a deci- 
sion must be made whether to have the capsule enter Earth over land or 
over the ocean, and whether or not to attempt an airborne snatch of the 
sample. In addition, decisions must be made about what, if any, systems 
should be installed for aborting the mission or sterilizing the sample 
in the event of deviations from the mission plan. 

It is doubtful that decisions such as these can be made in a logical 
and consistent manner unless criteria for decision making are established. 
What criteria should be used? The simplest answer is, • **Choose that mis- 
sion design which gives the lowest probability of back-contamination." 
However, a little thought will convince us that this criterion is inade- 
quate, for among the range of possible mission designs is always the 
alternative of flying no sample return mission at all. This alternative 
has a probability of back-contamination equal to zero, and so the simple 
criterion above would always lead to no mission being flown, regardless 
of the scientific value of the mission or the extent to which improved 
understanding and mission planning could be used to reduce the risk of 
contamination. 

Actually, the probability of back-contamination is but one criterion 
for determining mission desirability. Others include: 

• The value of the mission (both direct benefits, such as 
improved science and technology, as well as indirect 
social benefits, such as enhancing U.S. prestige). 

• The probability of back-contaminating Earth with Martian 
organisms. 

• The probability of contaminating Mars with Earth organisms. 

• The economic cost of the mission. 


5. 1 A Framework for MSSR Mission Decision Maklne 


To make Intelligent choices among mission designs^ responsible 
declslon-maklng agencies must consider the Information and uncertainty 
surrounding the decision and carefully weigh the relative Importance of 
each of the attributes characterizing mission desirability. The princi- 
pal difficulty here Is that Interested parties to whom the decision- 
making agencies are responsible often have widely differing states of 
Information and uncertainty, differing preferences, and even differing 
models of the way events are related. For example, some scientists 
believe that the probability of life on Mars Is Insignificant. Others 
believe that this probability Is quite high. Likewise, some scientists 
would argue that the scientific value of returning a Martian sample to 
E'^rth would be enormous, even If It were found to contain no life. 

Others might feel this value to be debatable. The role of quantitative 
analysis In social decision making Is to facilitate the declslon-maklng 
process. It accomplishes this by organizing the factors relevant to the 
decision so that speclflr areas of disagreement can be Identified and the 
Implications of the disagreement can be measured. 

Quantitative analysis Is more likely to fulfill this role success- 
fully if a well-organized framework for decision making Is established 
first. Figure 5.1 shows a decision framework for sample return mission 
planning. The framework graphically illustrates the relationships among 
the three fundamental considerations that have a bearing on the decision- 
making process: alternatives. Information, and preferences. 

The alternatives Include mission design and containment policies 
(Including, of course, whether or not to conduct the sample return mis- 
sion at all). The outcomes to the mission are some level of scientific 
achievement and Information, a possible effect on the Earth's ecosystem, 
a possible effect on Mars, and a mission economic cost. For the pur- 
poses of Identification, key Influential but uncontrollable factors are 
Identified as "state variables": these Include such things as whether 

life exists on Mars, the contents of the sample, the nature and timing 
of accidents, the adaptability of Martian organisms to Earth environment, 
and so on. Information enters the decision In two places: in a system 

model that describes what Is known about the relation among decision, 
state, and outcome variables, and In describing our knowledge or lack of 
knowledge about the probable values of the state variables. Preferences 
are represented on the right-hand side of Figure 5.1 as a "value model." 
The value model includes an explicit expression of the decision-making 
body's willingness to make trade-offs between outcome measures. 

Used properly, a we 11 -organized quantitative model such as that 
schematically represented in Figure 5.1 can serve several important 
functions in social decision analysis. First, it can be used to identify 
those state variables and model elements that significantly influence the 
decision. We saw an example of this use in the sensitivity studies of 
the last chapter. Public review can then be focused on the issues that 
matter. Second, the model organises the information in a concrete form 
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so It can be constructively reviewed by all interested parties. Specific 
areas of disagreement can be identified, and the implications of the dis- 
agreement can be measured. Conflicts may often be avoided by demonstrat- 
ing that the rational choice is the same despite disagreement over a 
particular value assessment or the estimate of the probability of some 
specific event. Explicit value trade-offs and uncertainty assessments, 
together with a system model such as that developed in the previous chap- 
ters, can focus the effort on those differences that do matter. 


5.2 A Simple Example 

To provide a simple example of how one would make decisions with the 
aid of the decision framework described above, we will consider an option 
for reducing the risk of back-contamination from the reference mission 
described and analyzed in Chapters III and IV. Recall that the major 
source of back-contamination risk was that of parachute failure during 
Earth entry. Therefore, we may wish to consider a system for incinerat- 
ing the sample In the event of parachute failure. If the parachute system 
should fail to operate properly, such a system would automatically ignite 
a layer of exothermic material that would heat the capsule and its con- 
tents to several thousand °C in a few seconds, thereby providing a high 
probability of eliminating the possibility of contamination. 

In determining whether we should really want such a system, we must 
also consider that incineration destroys th3 scientific value of the 
sample and that there might be some potential reliability problems with 
its use. For instance, the system may fail to operate when it is needed, 
or it may operate when it is not needed « One other possible problem may 
be that the rapid heating of the sample and capsule may drive off gasses 
that could conceivably cause the sample containment to rupture before 
sterilization is accomplished, spreading rather than killing the organ- 
isms. 


To be specific, let us suppose that an incineration system is devel- 
oped, and analysis of this system (experimental testing and the develop- 
ment of models to simulate its behavfor If installed as part of the 
reference mission design) indicates that 11 the parachute fails, the 
incinerator will operate with a reliability of 99%. Its false signal 
rate, the probability that it will function when the parachute has not 
failed, is 1 in a 1,000. The probability that sample containment will 
rupture, causing the sample to scatter before sterilization is complete, 
is determined to be I chance in 100. These are purely hypothetical 
numbers, but they will be sufficient to illustrate the method. Figure 



^ 0 ehntjo the modification of the tree structure for the probability of 
back-contamination from major equipment failure that is 
for the addition of the system fr . Incinerating the sample. In this 
Illustrative example, we see tha -. he probability of potential contamxn 
tion is reduced from 1.6 X lO'^ to A X 10'^, a reduction of a factor of 

four. 

It is easy to understand the reasons for the magnitude of reduction 
obtained. In Chapter IV the sensitivity of the probability of potential 
contamination to the probability of parachute 
ure A. 2). Even though parachute failure was the single m st c 
risk element for the reference mission, the sensitivity ana ys s s owe 

thrcrntamination probability could be reduced only by about an order 
of magnitude by eliminating the probability f f of 
the incineration system reduces but does not eliminate te c 
oarachute failure to potential contamination (and, in fact, adds the risk 
ofeS^osive containmLt rupture) the factor-of-four reduction obtained 
aLve^ls understandable. Unfortunately, a fail-safe systOT that eliminates 
or substantially reduces the risk associated with one risk element hs 
relatively small Impact on the overall risk because that overall r.sk 
arises from a large number of factors. 

This leads to what may be a difficult decision for mission designers. 
Suppose the incineration system cannot be installed without reduc ng 
mission science payload in some way. For ®«®?P^®> 

monitoring and control of sample environmental conditions (e.g., tempera 
txxte) more difficult and add weight and complexity, thus using resources 
that might otherwise be devoted to scientific aims. The question is, 
"Should the incineration system be installed, given that t re "|^®® .® 

ontamlnation probability by a factor of four but J^Jon 

entific value of the mission by a certain (known) amount? The decision 

ing the contamination risk versus the cost of reducing the scientific 
payoff of the mission. 

The decision framework of Figure 5.1 suggests that this question is 
best answered by separating the value issues from the engineering and 
technological ones. The value issue is; 

. How much reduction in the scientific value of the mission 
(or Increase in mission cost) should be accepted in order 
to reduce the probability of contamination by a given 
amount? 

The answer to this question is conveniently expressed by specifying the 

v.lu. for . •■cont»lo.tl<m p.o.lty." ^uppo^ w. define vj to 
be the value of a mission with a particular design d. 

Intraccount both the scientific benefits of the mission ®*“* 
costs but does not include the cost of potential back-contamination. 
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SAMPLE CONTAIN- 
MENT FAILS BEFORE 
STERILIZATION 


FIGURE 5.2 EFFECT ON BACiv-CONTAMINATION PROBABILITY OF SYSTEM FOR INCINERATING 
SAMPLE IN THE EVENT OF PARACHUTE FAILURE 



Let Pjj be the back-contamination probability for the mission. The choice 
of an optimal mission design may be expressed mathematically as the maxi- 
mization of the expected net value of the mission, defined as 


Expected net 

value of mission = E(vj) - Pd*^ > (5.1) 

with design d 


where E(vd) is the expected mission value and K is a contamination 
penalty.* The contamination penalty K is expressed in the same units as 
mission value and detennines the weight we assign to the risk of back- 
contamination in assessing the net value of a mission. The higher the 
value we assign to K, the lower the net value of the mission and the more 
inclined we are to trade off mission scientific value and increased eco- 
nomic costs in order to obtain a lower probability of contamination. 

To illustrate, let us return to our example decision of whether to 
install an incineration system in the reference mission. To simplify, we 
will assume that the additional economic cost of installing the inciner- 
ator is negligible, but that its installation will result in a definite 
reduction in scientific value by a fraction 6* We will define a con- 
tamination penalty for the decision in units of the expected scientific 
value of the nominal mission design. Let the expected scientific value 
( of the reference mission without the incinerator system be 


E(v) = 1 


Then the expected scientific value with the incinerator is 


E(v') =1-6 


An expanded discussion of this approach (in the context of integrating 
outbound planetary quarantine requirements into mission planning) is 
contained in a previous SRI report.® Hirschleifer"^ and Howard® have 
pointed out the need to address directly the trade-off between incre- 
ments of probability of a catastrophic outcome and a decision maker's 
willingness to pay (or accept payment). More complex formulations are 
possible. For example, more sophisticated calculations may employ von 
Neumann-Morgenstern utility to include the effect of risk aversion. 

For a discussion of the issues of risk aversion see von Neumann and 
Morgenstern® and Luce and Ralffa.^o 
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The probability of back-contamination without the incinerator is 1.6 X 
10~^. Incinerator the probability of back-contamination is 

4 X 10~^. Following Equation 5.1, the expected net value of the mission 
without the incineration system is 


Expected net value 

without incineration = 1 - (1.6 X 10“^)K , 

system 


and the expected net value with the incineration system is 


Expected net value 

with incineration = 1 - 6 - (4 X 10”^)K 
system 


If the mission is not flown, no scientific value will be produced and no 
risk of back-contamination will be taken. Thus the expected net value 
of the alternative of not flying the mission is zero. 

The best alternative among the three choices (fly the mission with- 
out the system, fly the mission with the system, or don' t fly the mission) 
is that with the highest expected net mission value. 

Figure 5.3 shows the optimal choice for this example as a function 
of 5 and K. Regardless of 6, if the contamination penalty is high enough, 
the alternative of not flying the mission is optimal -- the mission results 
simply aren't worth the risks of contamination. For a given contamina- 
tion penalty (say K = 10'^), the incineration system should be Installed 
as long as the cost to the scientific investigations is less than a cer- 
tain amount (6 = 0.1 if K = 10^) — otherwise, the mission should be flown 
without the system. As the contamination penalty increases, the break- 
even 6 (the amount of scientific value we are willing to give up to re- 
duce the back-contamination risk) Increases also. 

Figure 5.3 illustrates that a given contamination penalty implies a 
certain optimal decision among the choices. Conversely, were the deci- 
sion to be made without the use of a contamination penalty, it would be 
consistent with only a certain range of contamination penalty values. 

For instance, if installation of the Incineration system results in a 1% 


^Actually, as discussed in Chapter II, these probabilities should be 
attenuated by the probability that life exists on Mars, the probability 
that such life would be returned by the spacecraft, and the probability 
that released Martian organisms would reproduce on Earth. We ignore 
this for simplicity. 
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loss In science value (( = 1%), the decision to Install the system and 
fly the mission Is optimal only for contamination penalties between about 
1Q2 and 2 X 10^. 

There are many decisions in designing a mission in which a trade-off 
between scientific value and probability of back-contamination must be 
made. These include the number and types of samples to gather on Mars, 
the choice of recovery method at Earth (e.g., direct Earth entry, orbital 
recovery with Earth analysis, or analysis in orbit), and whether to 
include various backup and fail-safe systems. Each of these decisions 
may be formulated as a trade-off between science values, economic cost. 



0.7S 

FRACTION OF MISSION SCIENCE 
VALUE WHICH IS LOST WHEN 
INCINERATION SYSTEM IS INCLUOED, 5 

FIGURE 5.3 QUARANTINE VERSUS SCIENCE TRADEOFFS 



and reduced risk of back>contamlnatlon. If each of these decisions is 
made without explicit reference to a contamination penalty, each may 
imply a different range of contamination penalties. If these ranges do 
not overlap, there will be no single contamination penalty for which the 
given decisions are optimal, and, therefore, the decisions will imply 
that inconsistent trade-offs are being made. On the other hand, if the 
contamination penalty is established at the outset, then the decision 
framework can be used to obtain decisions that consistently reflect the 
explicit trade-offs implied by that penalty. 

Obviously, specifying the appropriate values for K and 4 is a diffi- 
cult task. However, it may not be necessary to specify the contamination 
penalty with great precision. The precise value of K will not affect the 
decisions to be made unless the specified point in the (K, g) plane hap- 
pens to be close to the boundary between two optimum alternatives. If it 
is close to the boundary, then the second best alternative is close in 
preference to the optimum, and a small error in K will not be of great 
importance. 

This chapter has shown how a contamination penalty can be used in 
the context of a decision framework to clarify the decisions requiring 
trade-offs among different MSSR mission attributes. The following chap- 
ter discusses how one could go about determining a contamination penalty 
for an MSSR mission. 
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VI THE CONTAMINATION PENALTY 


This chapter explores lu more detail the concept of a contamination 
penalty and its application to sample return mission design decisions 
for which the risk of back-contamination is a consideration* We begin 
by defining more carefully the concept of a contamination penalty. Next 
we discuss the issues that should be considered in determining an appro- 
priate value for the contamination penalty. Finally^ we discuss the 
advantages and disadvantages of the use of a contamination penalty com- 
pared to other methods of providing guidance for decisions relating to 
back-contamination. 


6.1 Definition of the Contamination Penalty 

The definition of a contamination penalty may be inferred from the 
example of the last chapter. The contamination penalty, multiplied by 
the probability of contamination, gives the amount by which the value of 
a particular mission design should be penalized in the comparison with 
other mission designs to account for that particular mission’s probability 
of back-contamination. Thus, the contamination penalty is the cost to be 
assigned per unit increase in the probability of contamination. 

This may be clarified by a graphical Illustration. The simple mis- 
sion design problem considered in Chapter V required a decision to be 
made between three mission alternatives: the reference mission without 

a system to incinerate the sample in the event of parachute failure, the 
reference mission with the incineration system, and the alternative of 
not flying the mission at all. To facilitate decision making, each 
strategy can be characterized by two numbers: a probability of back- 

contamination and the expected scientific value of the mission.* Figure 
6.1 illustrates these three alternatives on a graph whose horizontal axis 
measures probability of contamination and whose vertical axis measures 
expected mission value. A 6 (fraction of the mission value lost if the 
incinerator is Installed) of 0.25 is assumed for the figure. 

In general, many mission design alternatives will have varying 
levels of probability of back-contamination and expected mission value. 


A similar graphical illustration is presented in a previous SRI report? 
dealing with outbound planetary contamination. 

"^^Scientific value is defined here as the value of the benefits derived 
from the mission minus economic costs. 
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PROBABILITY OF BACK-CONTAMINATION 

FIGURE 6.1 GRAPHICAL INTERPRETATION OF THE 
CONTAMINATION PENALTY 


These other strategies are represented by points lying In the shaded 
region of Figure 6.1. Notice that no mission strategies exist In the 
region of the graph corresponding to both a very high mission value and 
a very low probability of back-contamination. If the mission Is required 
to have a very low (relative to standard design) probability of back- 
contamination, It will require system redundancy to Improve reliability, 
methods of verification, and fall-safe systems. This tends to decrease 
expected mission scientific value by Increasing costs and weight and 
making monitoring and environmental control of the sample more difficult. 

In choosing among the available strategies, we will obviously want 
to obtain a design with the lowest probability of contamination for a 
given expected scientific value. Similarly, for a given probability of 
contamination we will want a mission design that yields the highest pos- 
sible scientific value. Thus, we will want a mission design that lies 
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on the border of the region characterizing the set of possible strategies. 
This border, which is widely known in economic theory that deals with 
trade-offs amon| different objectives, is referred to as the Pareto- 
optimal border. 

A choice among strategies lying along the Pareto-optimal border 
requires that a trade-off be made between increments of expected value 
on the vertical scale and increments of probability on the horizontal 
scale. The ratio of these increments is the slope of the tangent line 
to the Pareto-optimal border. The slope of the tangent line that passes 
through the optimal mission design defines the contamination penalty. 

Suppose the contamination penalty is K = 6250. The line with this 
slope is shown in Figure 6.1 to be tangent to the Pareto-optimal border 
at the mission design representing the reference mission with the incin- 
eration system. (The reader may verify from Chapter V that for a 6 0.25, 
K = 6250 is within the range of values for which this choice was shown 
to be superior to either the reference mission without the incineration 
system or that of not flying the mission.) If the contamination penalty 
is increased, the slope of the line increases and it will be tangent to 
a point with a lower probability of contamination and a lower expected 
scientific value. If the contamination penalty is decreased, the slope 
of the line decreases and tangency occurs for a point with a higher prob- 
ability of contamination and a higher mission scientific value. Thus, 
the contamination penalty defines a trade-off between contamination prob- 
ability and expected scientific value, and this trade-off implies a 
preference for a particular mission design. 


6.2 The Contamination Penalty Versus the Cost of Contamination 

Since the product P^K of the probability of contamination P^ and 
'he contamination penalty K is the reduction in expected mission value 
necessary to account for the risk of contamination, it is tempting to 
conclude that the contamination penalty is the reduction in value (cost) 
that should be assigned if the probability of contamination is one. If 
this is the case, then the contamination penalty should be the cost to 
society of back-contamination. This is not the case. Interpretation of 
the product P^jK as the reduction in mission value to account for the pro- 
bability of contamination is only valid for small probabilities of con- 
tamination P^. The contamination penalty is simply a number assigned 
for making trade-offs in a consistent way between small probabilities of 
contamination. 


*Most modern textbooks on microeconomic theory discuss the concept of 
Pareto-optimality. For example, see Walsh. 
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The situation is, in many respects, analogous to that of assigning 
a value to a human life in the context of decisions on automobile or 
aircraft safety. In this context, values of life such as $200,000 to 
$500,000 have been used.’^® It would b- Improper to assert that the 
value of life used in this context represents an amount an individual 
would pay to avoid certain death. Similarly, it would be Improper to 
assert that the contamination penalty used in the context of a back- 
contamination analysis represents an amount society would pay to avoid 
certain contamination. 


6.3 Determination of an Appropriate Value for the Con tanination Penalty 

Like the social "value of life," the contamination penalty should 
be representative of the values of society as a whole. The contamination 
penalty is society's way to tell mission designers of society's willing- 
ness to accept back-contamination risk in order to obtain the benefits 
of space exploration. As such, it should properly be set by a body 
responsible to the electorate. However, decision analysts, biologists, ^ 
and other specialists should provide guidance in their areas of expertise. 

To assess a contamination penalty, it will be necessary to know the 
probability distribution oyer the range of possible consequences of con- 
tamination: Will actual back-contamination be a major ecological disas- 

ter comparable to the return of a great ice age, will it be a minor incon- 
venience, or might it even be beneficial? 

Some conceivable effects of the contamination of the Earth with 
Martian organisms are: 

• A Martian life form occupies a new ecological niche, and 
affects other life forms minimally, for example, by turn- 
ing the Antarctic dry valleys red. 

• It competes with or harms some forms of life relatively 
inessential to humanity, comparable to the loss of the 
great whales, or the replacement of one species of plank- 
ton by another. 

• It hurts a plant or animal on which man depends, as does 
corn blight. 

• It harms an activity, such as rendering cold storage inef- 
fectual in preventing bacterial growth. 

• It causes a new form of cancer. 

• It causes a pandemic that kills the entire population of 
Earth. 


*For a discussion of the differing roles of experts and^|ociety as a 
whole in matters of this kind, see Barrager and North. ^ 
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Analysis should be Initiated to model the range of conceivable 
effects of contamination and their relative likelihoods. Obviously, 
the present state of knowledge is such that there will be a tremendous 
amount c-f uncertainty in the assessment of the potential consequences of 
back-contamination. Nevertheless, available knowledge and information 
can and should be represented in the decision-making process. Methodology 
developed to model the consequences of disasters (Including accidental 
release of radioactivity from nuclear power plants^* and hurricanes^^ may 
be helpful to this effort. 

At least two approaches can be used to determine a contamination 
penalty for sample return missions: 

(1) Set a maximum probability of back-contamination for a 
nominal mission and use this to infer a contamination 
penalty. 

(2) Directly assess a contamination penalty through trade- 
off judgments. 

The principal difficulty with the first approach is the determination 
of a rational method for establishing a maximum probability. One approach 
that has been advocated for establishing acceptable risk levels is to 
limit the probability of the event under consideration to some small frac- 
tion of the already existing probability of adverse effects of the same 
magnitude from other sources.! 


For a discussion of how a contamination penalty may be inferred from a 
maximum allowable probability of contamination, see Howard, North, and 
Pezier.6 

t ,6 

Starr, Rudman, and Whipple introduce the notion of a "risk uncertainty 
principle," risks due to risk modes not previously considered. For risks 
to Ea-th, they use the example of "a giant meteor destroys Earth." Using 
the observation that such events have not occurred in the existence of 
Earth, they find a minimum risk of 2.5 x 10“^® per year. They conclude: 
"...risks or system failure probabilities of less than 2,5 x 10”^0 
not really worth considering as an unremovable risk threshold of 2.5 X 
10 has been defined." Since this is a number with dimension (years) 
one needs a characteristic time for the risk in order to define the risk 
threshold. Assuming a characteristic time for back-contamination risk of 
20 years, we find that the risk thresh d for planetary contamination is 
20 X (2.5 X 10"^®) = 10"^ probability. One may want to set the maximum 
probability of plantetary contamination to be, say, 1% of this for conser- 
vatism and because this risk is introduced by man. This leads to a 
contamination penalty K = 2 X 10^® (in units of the expected scientific 
value of the nominal mission). Unfortunately, as discussed in the text, 
there are serious problems to using such an approach. 

i i 
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For comparison, one might wish to consider the probabilities of natural 
catastrophles, such as earthquakes and long-term weather changes, and 
potential man-made disasters, such as a massive nuclear exchange between 
the United States and Russia. Unfortunately, this approach falls to pro- 
vide a logical method for taking Into account the benefits that are 
expected from the decision that carries with It a risk. Intuitively, we 
should be more willing as a society to accept additional risk for larger 
potential gains. 

The second approach, direct assessment of the contamination penalty, 
may be accomplished by breaking down the trade-off decision between risk 
and value Into more fundamental trade-off decisions. Howard proposes 
such an approach for the assessment of a value of life. Each of the 
possible consequences of contamination and their probabilities would be 
assessed; then Individual trade-off decisions would be established to 
reflect the degree to which society Is (or should be) willing to trade 
off those attributes It values (such as standard of living) In order to 
reduce the probabilities of the various consequences of contamination. 

The logic behind this approach Is similar to the logic behind the analysis 
of the probability of rare events. It Is easier to make each Individual 
trade-off decision and Infer the global trade-off than It would be to make 
the global trade-off between back-contamination risk and value directly. 

Obviously, establishment of a contamination penalfy will not be an 
easy task, regardless of the method chosen. However, It should be reem- 
phasized that It may not be necessary to determine the appropriate con- 
tamination penalty to a high accuracy. If analysis of alternative MSSR 
mission designs In the decision-theoretic framework presented In Chapter 
V Indicates that this Is the case, very crude methods for estimating a 
contamination penalty may be adequate. 


6.4 Alternatives to Using an Explicit Assessment of the Trade-off 

Between Mission Value and Probability of Back-Contamination 

The alternative to using a contamination penalty as an explicit 
assessment of the trade-off between mission value and probability of 
back-contamination entails using such criteria as "best practical tech- 
nology," or probability constraints that must be met Irrespective of 
economics. The weakness of probability constraints Is that they give no 
Incentive to reduce a probability below the constraint threshold, and 
they may result in Information that could show the constraint to be 
violated having a negative value. As a hypothetical example, on might 
"rather not knov^' whether a biological seal on a sample canister has 
leaked If In this case a constraint on back-contamination probability 
would be violated. Examples and further discussion of the weaknesses of 
a constraint formulation are found In Howard, North, and Pezler.* 

Such qualifiers as "as low as practical," "safe enough," and "ade- 
quate safety" avoid the difficulty of assessing trade-offs, but they 
suffer from the same problems as do probability constraints, as well as 
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a balance la struck between the probability of release 

existi*for?^^S® science value of the mission, a negative incentive 

rlik Ld LJ for reducing contamination 

risk and for obtaining more information about the effectiveness of the 

approac es or guaranteeing containment. In moat cases only the costs of 

tZriZT "^®®^°" P'°8ram. Any^^new tecJJology 

y I ^ mandated; any new Information showing a tech- 
nology is less safe than previously supposed may result in rejection of 

Sev Explicit trade-offs may be difficult to establish, but 

they provide a means for clarifying objectives and thereby ensuring that 
decisions are, in the broadest sense, cost-effective. 
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Vll TOPICS FOR FURTHER RESEARCH 


During the preparation of this report, consideration was given to 
additional research that would contribute to the development of a method- 
ology needed to support decisions involving the risk of back-contamina *on 
from MSSR mission*!. The purpose of this chapter is to note briefly the 
further research work that has been identified. 


7.1 Application and Extension of Assessme n t Methodology 

a. An interesting and useful application of the methodology devel- 
oped in this report would be an Investigation of the alternative strate- 
gies that have been proposed for bringing a Mars sample to Earth. Three 
fundamentally different strategies that have been suggested are: 

(1) Direct Earth entry (the reference mission for this 
study) . 

(2) Orbital recovery with analysis in an Earth-based 
sample receiving lab (Appendix E). 

(3) Orbital recovery with preliminary analysis in orbit. 

The methods described in Chapters II, III, and IV could be used directly 
to provide estimates of the risk of back-contamination from nominal mis- 
sion designs based on each of these strategies. The results would indi- 
cate which risk elements associated with each mission strategy contribute 
most to contamination risk. 

b. Given a specific strategy for sample return (e.g., direct Earth 
entry), an extension of the decision framework described in Chapter V could 
be used to determine a "best" mission design. The objective of this re- 
search would be to develop and Illustrate a process for consistently 
making decisions regarding redundancy and the use of fall-safe systems 

to obtain a desired trade-off between back-contamination risk, mission 
cost, and expected mission scientific value. Since design decisions de- 
pend on the contamination penalty used, this research should show the 
Impact on mission design of assuming different contamination penalties. 

An important result would be the Insight this research would provide into 
the degree of precision necessary for establishing guidelines for MSSR 
mission planning (regardless of whether the guidelines are in the form 
of contamination penalties, probability constraints, or the like). 
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An obvious extension of current methodology is the development of 
models for estimating the consequences of releasing Martian organisms into 
Earth s biosphere. As explained in Chapter II ^ no attempt was made in 
this research to assess the probability of growth for Martian organisms 
released on Earth. Similarly, no attempt was made to quantify the range 
of possible consequences of back-contamination. An assessment of the prob- 
abilities of various consequences of contamination will be necessary be- 
fore the probability of release computed for various sample return mission 
designs can be put in proper perspective. 

While it is recognized that the limited extent yf available infor- 
mation would constrain an analysis of the consequences of contamination, 
even a preliminary analysis, would be of value. For example, even a sim- 
ple analysis would permit a computation of the value of resolving uncer- 
tainty. Identifying uncertainties with a high value of resolution .’»ay 
suggest specific experimental questions that could be answered by Viking, 
by experiments performed during possible future Mars missions conducted 
before a sample return mission, or by experiments performed during a sam- 
ple return mission. 



Methodolot 

Penalties 


for Assessing and Operationalizing Contaminatinn 


Decisions about sample return imply a trade-off between the proba- 
bility of contamination and the scientific value of the mission. Trade- 
offs made should reflect the values of society as a whole. However, as 
a practical matter, this decision may well be made in the legislative 
and executive branches of government iu much the same way as decisions 
are made on other trade-off Issues, such as emissions controls (trading 
off permissible pollution levels versus economic Issues), nuclear safety 
(trading off the probability of accidental radiation release against the 
cost and supply of electricity), and recombinant DNA research. 

The concept of a contamination penalty provides a logical means for 
consistently making trade-off decisions. Sore of the Issues surrounding 
the assessment and use of contamination penalties have been discussed in 
this report and elsewhere. Much additional research needs to be done. 
Principal areas of research include determining the accuracy with which 
a contamination penalty must be specified and determining methods for 
obtaining assessments of contamination penalties to the required degree 
of accuracy. Clearly, the operational aspects of using a contamination 
penalty should be Investigated. Spe^.ifically, a procedure should be de- 
signed for proceeding from a contamination penalty, such as that specified 
by a policymaking body, to the level of numerical specifications tor in- 
dividual components and processes (and methods of validation) that would 
be required for the efficient management of a large technological oroluct 
such as an MSSR mission. ^ ^ * 
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Appendix A 

SOURCES OF NUMBERS FOR INITIAL EIOLOAD . 



Appendix A 

SOURCES OF NUMBERS FOR INITIAL BIOLOAD 

Figure A 1 shows the mn,bers and locations of Martian otganlsM as- 
analysis of the reference mission. A discnssion of each of 
sumed in the analysis ui Tho discussions are net meant to 

these assumptions is presented below. in the 

ne justifications for the .'"present is sXtJa/no single 

relevance. 

A. I 10^ Mart ian Organisms ( M O) in Sample Canister s 

The basis of this assumotion is an analogy with the biological con- 
tent rAnUrctic -^l ^ic has been h—en^l to^f 

:rh«Ion'm^rtain)\nd less, than ™ and 100 

«i»1o1Jb-ra 1. :a^-::"AliS^t: yame Of 

10^ MO was chosen as the base case. 

^2 10 0 MO Inside the Samp le Container 

container will be sealed on Mars' surface. The interior surface 
nf th?:on»tnrr“nd the outside of the canisters will haye an area of 

about 1 

Data exist regarding the surface density of Earth organisso on the 

‘“S::errr::^emM:d''ira^?r 

foire^onr: r£e/^ 

treate fo. vihing h|-« JO^- 

and between .0 to lO^ tpore, per_^m2 surface pj 1„2 «o 

p«';^’frJSrMSsS "ission lander yields the assumption of 100 organisms. 


A. 3 10 MO Inside the Compartment 

The container is passed to the horth-retu™ urticle 

r^ltnfr' rro^ro?5 ru;ptfo^ of lO. «« per m2 
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FIGURE A.1 ASSUMED ORGANISMS ON RETURN VEHICLE 



would imply 50 MO in the sample compartment. However, a smaller number, 
10 organisms, is assumed because the bioload of the compartment could be 
reduced in a number of ways: 

• When the compartment is sealed (brazed shut), its inside 
surface and the outsr'de surface of the container could be 
heated briefly to partially sterilize it. One would 
have to take care not to heat the samples. 

• A bioshield could be placed around the container on Earth, 
left in place on Mars' surface, and removed just before 
transfer of the container to the ERV. The area around 
the container seal could be sterilized with heat. 

Reduction by an even larger factor should be possible. It is worth 
attempting, since, as shown in Chapter III and Appendix C, these organ- 
isms are the most likely source of rontamination via leakage. 


A. 4 Expected 0.02 MO on the Outside of the ERV* 

The ERV does not travel to Mars' surface. The only way MO can get 
on the surface of the ERV is from leakage of the sample or from transfer 
of surface organisms from the Mars-ascent vehicle (MAV) during rendezvous 
and sample transfer. We evaluate here the expected number of MO trans- 
ferred from the MAV. 

The MAV will be launched from the surface of Mars and be placed in 
Mars orbit, oriented with respect to the sun as shown in Figure A. 2. The 
Mars-orbit vehicle (MOV), containing the ERV, will then maneuver and ef- 
fect linkup. After the sample is transferred to the ERV, the MAV will 
separate from the MOV, taking the docking cone with it. 

MO may be transferred to the ERV either generally during the period 
of station-keeping, when the MAV and MOV are in proximity, or specifically 
due to the acceleration of the linkup itself. The reasoning behind the 
assumed number of MO transferred is shown below. 

(1) Transfer due to acceleration during linkup: 

(a) MO on MAV exterior: 10^ organisms (10^ soil particles). 

Area: about 20 m^ (500 MO per m^--higher density because 

of greater duration of exposure). 

(b) Worse-case acceleration during docking: 100 g. Larger 

accelerations are assumed to lead to mission abort due 
to damage. (Note: the nominal acceleration would be 

much lr.»er, perhaps a few g.) Fraction of MO shaken off 
MAV during docking: lO"^. 


Dr. Jack B, Barengoltz of JPL was very helpful in providing the esti- 
mates for this assessment. 
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DOCKING SEQUENCE (Concluded) 
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(c) Fraction of organisms shaken off that land on the ERV: 
10”3. This number Is strongly dependent on the geometry 
of the spacecraft. Most of the transfer Is by direct 
line of sight. The docking cone (see Figure A. 2) will 
shield most of the ERV from line of sight with the MAV. 
Most particles will be shaken off the MAV near the dock- 
ing cone; since this area experiences the largest accel- 
erations during docking. 

(d) Expected number of organisms transferred during the dock- 
ing acceleration: 10^ x 10”3 x 10“3 = 0.01. 

(2) Transfer during station-keeping: 

In addition to transfer of particles during the actual dock ng, 
transfer may occur during the station-keeping phase. There 
will be no line of sight then, and this transfer will depend 
on the interplay of solar radiation pressure and electro- 
static forces. Anything shaded and ungrounded (as parts of 
the ERV will be) will tend to accumulate a negative change 
because solar wind electrons go in all directions while heavier 
protons in the solar wind travel in a straight line away from 
the sun. Shaded areas may have a potential up to three times 
the electron temperature, or -60 V. Areas in the sun will tend 
to get a positive potential due to the photoelectric effect. 
Particles coming off of the MAV solar panels may have a charge 
of +1/2 to +1 V. 

For Viking, an expected 33 particles was computed to be trans- 
ferred from the nonsterilized parts to the sterile landers dur- 
ing the one-year journey to Mars. The MAV and MOV will keep 
station for 3 or 4 days, or 1 percent of one year. However, 
there may be an enhancement over the Viking results by roughly 
a factor of 10 due to the larger turning radius of the particle 
trajectories allowed for transfer. On the other hand, there 
may be a factor of 3 reduction compared to Viking due to parti- 
cle dispersal by the solar wind. (The MOV will be between the 
MAV and the sun, and particles will be emitted perpendicular to 
the MAV surfaces.) Thus, the expected number of particles 
transferred during station-keeping is roughly estimated to be 


33 X j^QQ X 10 X j 1 soil particle. 

(Viking) (Time (Turning (Solar 

Ratio) Radius) Wind) 

.2 

Assuming the conjectured 10 MO per Martian soil particle, this 
implies a transier of O.Ol MO. 
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The fraction of MO transferred from the MAV to the EW is strongly 
dependent on the geometry assumed. Careful design of the docking cone, 
used perhaps in conjunction with a dimple bioshield, '■ould possibly re- 
duce this fraction substantially. On the other hand, if the docking 
cone were not installed, this number could increase by a factor of 10 to 
100. Under the assumptions of this report, biological contamination on 
the spacecraft exterior surface is unimportant compared to the other 
sources of potential contamination. 


A . umed Paths Followed by MO on the ERV 

A discussion of the fraction of MO dislodged due to micrometeoroid 
impact, thd fraction dislodged due to AV corrections, and the fraction 
that remain on the Earth-entry capsule (EEC) is given in Section 3.7.2. 
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Appendix B 

PROBABILITY TREE— MAJOR EQUIPMENT FAILURE 


Figure B.l displays the complete probability tree for computing the 
probability of potential back-contamination due to major equipment fail- 
ure. The numbers under the branches of the tree not enclosed in boxes 
are the event probabilities assumed for the reference mission. Table B.l 
defines the events and comments on the numerical values assumed for the 
event probabilities. 

The numbers in square boxes in the fig;ure are probabilities of po- 
tential back-contamination, conditioned on the events leading to that 
point in the tree. They are obtained by "rolling back" the tree -- mul- 
tiplying the probability of each branch by the conditional probability of 
contamination on that branch and adding. 

The numbers in ovals are the contributions to the contamination 
probability that come from all paths ("scenarios") leading through that 
point on the tree. They are obtained by multiplying the conditional 
probability of contamination at that point (square boxes) by the proba- 
bility of reaching that point in the tree (the product of the event prob- 
abilities along the branches leading to that point). These numbers show 
the major factors contributing to the probability of back-contamination. 
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FIGURE B.1 COMPLETE PROBABILITY TREE FOR MAJOR EQUIPMENT FAILURE 
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Probability Probability of survival assumed for 10 Depends on method of release assumed 

of each MO released into the Earth’s to and whether an attempt is made to 

survival environment* 10*^ sterilize location of release. 




Appendix C 

PROBABILITY TREE - -LEAKAGE 


This appendix presents detailed assumptions and results for the prob- 
ability of back-contamination due to leakage of Martian organisms (MO) from 
the sample compartment^ sample container, or sample canisters on board the 
Earth-entry capsule. Figure A.l illustrates capsule geometry and notes 
the numbers of Martian organisms assumed to be in each location. Note 
that leakage of organisms from the sample requires failure of all three 
seals. Leakage from the container requires failure of the container seal 
and compartment seal. Leakage of organisms from the sample compartment 
only requires failure of the sample compartment seal. 

The analysis is conducted separately depending on the mission phase 
during which leakage occurs. The two mission phases considered are leak- 
age during the last 30 days of heliocentric transfer (the contribution 
to contamination probability of MO leaked prior to this is considered 
negligible) and leakage during atmospheric entry. 

I Table C.l defines events and provides comments on numerical values 

assumed in the construction of the probability trees. Figures C.l and 
C.2 show the probability trees constructed from the events and probabil- 
ities in Table C.l. 

The results of probability tree roll-back indicate that the proba- 
bility of back-contamination due to the leakage component during helio- 
centric transfer (2.7 X lQ-10) is insignificant compared to that due to 
leakage during Earth entry (1.2 X 10"^). 
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FIGURE C.1 PROBABILITY TREE FOR LEAKAGE DURING HELIOCENTRIC TRANSFER 






Appendix D 

PROBABILITY TREE--SURFACE C0NT:AMINANTS 


This appendix summarizes the analysis of the probability of back- 
contamination due to Martian organisms (MO) located on the exterior of 
the Earth-return vehicle (ERV) . MO initially located on the ERV may be 
brought into the Earth's environment either on the surface of the Earth- 
entry capsule (EEC) or because they are dislodged prior to EEC recovery 
and follow a trajectory that results in Earth capture. Section 3.7.2 
discusses the assumptions made concerning the expected fraction of sur- 
face MO that would follow various paths that may or may not lead to in- 
troduction into the Earth's ecosystem. Separate probability trees were 
constructed to analyze the risk from dislodged MO as opposed to that 
from MO that remain lodged to the EEC. 

For a dislodged to result in contamination, it must survive he- 
liocentric transfer, be captured by Earth, and survive once it enters 
Earth's atmosphere. For an organism that remains on the EEC to cause 
contamination, it must survive heliocentric transfer and capsule heat-up 
during entry. Simple probability trees representing these events for 
each of the five risk elements in the surface contaminants risk category 
are shown in Figure D.l. The results of the tree roll-back calculations 
are also shown. Table D.l presents some comments on the probabilities 
assumed for the tree structures. 
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A PRELIMINARY ANALYSIS 
OF AN ORBITAL RECOVERY OPTION 


Appendix E 


A PRELIMINARY ANALYSIS 
OF AN ORBITAL RECOVERY OPTION 


risk Chapter III, the largest source of back-contamination 

risk for the reference mission comes from events associated with the 

Earth orbit and recovering It by means of a space vehicle sent from Earth 
eliminates the principal Earth-entry-phase risk elements. The sample 
would not be opened or analyzed until it reached the planetary sample re- 
ceiving laboratory (PSRL), located on Earth. This strategy thus djffe« 
essentially from that of analyzing the sample in an orbiting receiving 

shuttle. A brief preliminary analysis If 
the risk of back-contamination from an MSSR mission assuming orbital re- 
covery is presented in this appendix. wroitai re 

Orbital recovery has the following advantages over direct Earth 
entry , 


• ith direct Earth entry, the date and rough location of the 
entry have to be specified about a year in advance, at the 
time the Earth return vehicle leaves Mars orbit. By put- 
ting the sample into Earth orbit, return to the Earth's 
surface can be scheduled to avoid bad weather or other 
short-term risks. 

• With direct Earth entry, the Earth-entry capsule flit j to 
Mars orbit and back, carrying all subsystems needed for 
Earth entry, such as heat shield, parachutes, flotation de- 
vice, and padding in case of rough landing. By recovering 
the capsule in a space shuttle, one could obtain greater 
assurance of a safe Earth entry by enclosing the entire 
Earth-orbit capsule (EOC) in a big, strong, leakproof, 
sterillzable box. This box could also support maintenance 
of proper conditions for the sample during Earth entry 
(e.g., temperature). 

• Shuttle recovery would ameliorate the problem of contami- 
nation from organisms located on the capsule surface. The 
capsule would be contained in a sealed box, which would 
only be opened at the PSRL. Any possible Martian organ- 
isms shaken off the EOC by the final orbital Insertion 
maneuver would either settle back on the surface or dis- 
perse far from the EOC, assuming the EOC was allowed to 
stay in Earth orbit for some time before recovery. 




We thus see that orbital recovery has potential advantages over 
direct Earth entry, in terms of both the problem of back-contamination 
and the preservation of the environment of the sample* 

There are two options for recovery of the EOC from orbit ; 

A. Direct recovery by the space shuttle* This would make use 
of the manned, routine, shuttle-entry mode. The EOC would 
be required to put itpelf into a near-Earth orbit a.;ce8- 
sible to the shuttle. Tlvin wu;’ld require a large velocity 
change and consequently a targe amount of propulsion car- 
ried to Mars orbit and 

B. Recovery from a 24-hou* Elliptical orbit. This recovery 
could be made by a vehicle constructed especially for the 
purpose, presumably an unmanned vehicle. The vehicle could 
launch from a shuttle in orbit or from the ground, capture 
the EOC, and transport it either to an orbiting shuttle or 
to the Earth. Alternatively, one would have to find a way 
to boost the shuttle into this difficult orbit. The EOC 
would be about the same mass as the Earth-entry capsule in 
the case of direct Earth entry--the extra propulsion re- 
quired for orbit injection would balance off the weight 
saving due to removal of the unnecessary heat shield and 
parachute.^ 

A preliminary analysis of Option A is presented below. The analysis 
serves as another example application of the methodology developed in this 
report. 


E.l Probability Tree Constructed for Analysis 

Figure E.l shows the probability tree for major equipment failure 
for orbital recovery option A. The event probabilities shown in the fig- 
ure were assessed with the help of Dr. Harry N. Norton of JPL and are 
discussed briefly in Table E.l. The conditional probabilities of con- 
tamination are displayed in the figure in square boxes and the total con- 
tamination probabilities due to all possible scenarios containing a given 
node in the tree (risk contributions) are shown in the ovals. A major 
source of risk is the probability that accidental atmospheric entry will 
fall to sterilise the sample through heatup. Figure E.2 shows the sen- 
sitivity of the probability of back-contamination to this quantity. 


*We would like to thank Dr. Harry N. Norton of JPL for an informative 
discussion on this topic. 

t X 6 

See Figure 45 and page 118 in Heaver, Norton, and Darnell. 

*Based on a comparison of Tables XXIII and XXIV in Reference 19. 
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recov«ry)y air carriers have an accident involving a fatality 
0«9996 once every 10^ operations (takeoff or landing) The 

(other- box should withstand sone crashes that cause fatali- 
vise) ties* Mon-nominal probability same as assumed in 

reference mission^ Table B.l. 









Roll-back of th« probability tree In Figure E.l shows that the prob- 
ability of back-contamination due to major equipment failure Is 1.4 X 10*® 
for orbital recovery, compared to 1.6 X 10”^ for the reference mission 
Involving direct Earth entry. We wish to emphasize that the estimates 
In this appendix are for Illustrative purposes only; nevertheless, this 
Indicates that this mission strategy may offer substantial Improvement 
In back- contamination probability. 

^gfgfence mission has a probability of back-contamination due 
to leakage of 1.2 X 10-6. The major contribution Is due to leakage dur- 
ing Earth entry. Orbital recovery by means of a box sealed In orbit 
should reduce this probability substantially. (Care must be taken In 
the recovery procedure to guard against contamination of the space shut- 
tle due to leakage.) Similarly, orbital recovery may be able to allevi- 
ate the major source of risk from surface contaminants, that Is, atmos- 
pheric exposure to Martian organisms lodged on the exterior of the 
Earth-entry capsule. Table E.2 summarizes limits on the probability of 


Table E.2 

B4CK-C0NTAMINATI0N PROBABILITIES 
FOR ORBITAL RECOVERY OPTION 


Risk Category 

Probability of 
Back-Contamination 

Malor Source of Risk 

Major equipment 
failure 

1.4 X 10-6 

EOC accidentally enters Earth 
atmosphere directly and 
sample is not sterilized 

Leakage 

>2.7 X 10-10* 

Not analyzed 

Surface contaminants 

>10-9* 

Not analyzed 


*Probablllty from reference mission not Including Earth entry phase. 


back-contamination for the three risk categories. The entries for leak- 
age and surface contaminants are Identical to those computed for the 
reference mission, not Including contributions from the direct Earth- 
entry phase. We have not evaluated the specific contribution of the or- 
bital recovery mission phase to these entries; therefore, the values 
Indicated represent lower limits. 

The added cost of orbital recovery from a shuttle-compatible orbit 
Is estimated In Table E.3 to be $30-60 million. This Is to be compared 
to a cost in the one-bill lon-dollar range for the whole mission. 



Table E.3 





PRELIMINARY ESTIMATE OF ADDITIONAL COSTS OF DIRECT 
RECOVERY BY THE SPACE SHUTTLE OVER 
THE REFERENCE MISSION (DIRECT EARTH-ENTRY) 


Source 

Additional 

Cost 

($ millions) 

Construction of sample return box, shuttle 
launch and recovery, and ground operations. 

$20-40 

Extra propulsion and extra size of all mission 
stages In order to allow Earth orbital vehicle 
to enter a low-Earth (shuttle-compatible) 
orbit. 

20 

Savings due to elimination of task force to 
perform the air snatch on the Earth-return 
vehicle. 

? 

Total extra cost (rough estimate) 

$30-60 


E.2 S»«Mnarv of Results 

Table E.4 summariaea the results of the analysis. This preliminary 
comparison of the orbital recovery option with the nominal reference 
mission design Indicates that orbital recovery may have a substantially 
lower probability of potential back-contamination, a sosiewhat greater 
mission complexity, and a higher dollar cost, or may require a reduction 
In the size of the returned sample. These estimates need to be confirmed 
by more careful analysis. Including an analysis of the option of orbital 
recovery from other orbits, for Instance, a 24-hour elliptical orbit. 
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Table E.4 


COITARISON OF NOMINAL MISSKM WITH 
TWO OPTIONS INVOLVING ORBITAL RECOVERY 


Mission 

Total 

Probability 
of Back- 
Contamination 

Cost Differ- 
ential Above 
Nominal 
Mission 
($ millions) 

Scientific 

Value 

Reference talssion 
(direct Earth entry) 

1.6 X 10"^ 

0 

Nominal 

Orbital recovery— 
24-hour elliptical 
orbit 

Not assessed. 
Possibly 
somewhat 
above 1.4 X 
10“® due to 
extra com- 
plexity of 
mission. 

Not investi- 
gated 

Nominal 

Orbital recovery- 
low orbit (shuttle- 
compatible) 

1.4 X 10-6 

$30-60 

Nominal 




p 



T 




T 

i 


I 


I 




1 . 


I 


REFERENCES 


1. M. R. Christensen, J. L. Bagby, D. L. DeVlncenzl, G. V. Levin, 

P. D. Stebells, R. P. Wolfson, and M. D. Wardle, "Mars Surface Sam- 
ple Return Quarantine Planning Study" (preliminary version) , Jet 
Propulsion Laboratory, Pasadena, California (December 3, 1976). 

2. C. L. Yen, "Systems Analysis for the Problem of Back-Contamination 
Associated with Mars Surface Sample Return Missions," Jet Propulsion 
Laboratory Engineering Memorandum, Pasadena, California (November 1, 
1974). 

3. C. Sagan and S. Coleman, "Spacecraft Sterilization Standards and 
Contamination of Mars," Astronautics and Aeronautics. Vol. 3, 
pp. 22-27 (May 1965). 

4. J. M. Harrison and D. W. North, "Probabilistic Models of Planetary 
Contamination," Stanford Research Institute, Menlo Park, California 
(April 1973). 

5. L. D. Jaffa, R. E. Camiron, R. Choate, F. P. Fanale, E. Haines, 

C. L. Hobby, J. S. Hubbard, R. J. Mackin, Jr., R. S. Saunders, and 
A. B. Whitehead, "Mars Surface Sample Return Science Requirements 
and Contamination of Earth," Jet Propulsion Laboratory, Pasadena, 
California (May 28, 1974). 

6. R. A. Howard, D. W. North, and J. P. Pezler, "A New Methodology to 
Integrate Planetary Quarantine Requirements into Mission Planning, 
with Application to a Jupiter Orbiter," Stanford Research Institute, 
Menlo Park, California (August 1975). 

7. J. Hlrshleifer, "The Economic Approach to Risk-Benefit Analysis," 
pp. 141-154 in Risk-Benefit Methodology and Application; Some 
Papers Presented at the Engineering Foundation Workshop. Sep- 
tember 22-26. 1976. Aailomar. California. D. Okrent, ed., prepared 
for National Science Foundation, Energy and Kinetics Department, 
School of Engineering and Applied Science, University of California, 
Los Angeles, California. 

8. R. A. Howard, "Life and Death Decision Analysis" (paper to be pub- 
lished) . 

9. J. von Neumann and 0. Morgenstern, Theory of Games and Economic 
Behavior (Second Edition, Princeton University Press, Princeton, 
N.J., 1947). 



10. D. R. Luce and H. Raiffa, Gamea and Declstona (John Wiley and Sons, 

New York, 1965). 

11. V. C. Walsh, Introduction to Contemporary Microeconomics (McGraw- 
Hill, New York, 1970). 

12. J. Linnerooth, "The Evaluation of Life-Saving: A Survey," IIASARR- 

75-21, International Institute for Applied Systems Analysis, 

Laxenburg, Austria (1975). 

13. S. M. Barrager and D. W. North, "Analyzing the Decision on Radio- 
active Waste Management," paper for the EPA Workshop, Stanford 
Research Institute, Menlo Park, California (February 1977). 

14. AEC "Potential Containment Failure Mechanisms and Their Consequences 
at a Radioactive Waste Repository in Bedded Salt in New Mexico," 
ORNL-TM-4639, U.S. AEC, NTIS, Washington, D.C. (October 1974). 

15. R. A. Howard, J, E. Matheson, and D. W. North, "The Decision to 
Seed Hurricanes," Science . Vol. 176, pp. 1191-1202 (16 June 1972). 

16. C. Starr, R. L. Rudman, and C. G. Whipple, "Philosophical Basis for 
Risk Analysis," pp. 629-662 in Annual Review of Energy. Vol. 1, 

J. M. Hollander and M. K. Simmons, eds., Annual Reviews, Palo Alto, 
California (1976). 

17. Mr. Frank Morelli, Jet Propulsion Laboratory, private communication. 

18. U.S. Nuclear Regulatory Commission, "Reactor Safety Study," pp. IX 19-3 
WASH- 1400, The Commission, NTIS, Washington, D.C. (October 1975). 

19. W. L. Weaver, H. N. Norton, and W. L. Darnell, "Automated Mars 
Surface Sample Return Mission Concepts for Achievement of Essential 
Scientific Objectives," NASA TM X-3184, National Aeronautics and 
Space Administration, Washington, D.C. (June 1975). 


